]> git.ipfire.org Git - ipfire-2.x.git/blob - src/patches/Tor-Sandbox-permit-the-clone3-system-call.patch
Tor: glibc needs rseq syscall as well
[ipfire-2.x.git] / src / patches / Tor-Sandbox-permit-the-clone3-system-call.patch
1 diff -Naur tor-0.4.6.10.orig/src/lib/sandbox/sandbox.c tor-0.4.6.10/src/lib/sandbox/sandbox.c
2 --- tor-0.4.6.10.orig/src/lib/sandbox/sandbox.c 2022-04-09 07:58:00.281189564 +0000
3 +++ tor-0.4.6.10/src/lib/sandbox/sandbox.c 2022-04-09 08:00:55.861698856 +0000
4 @@ -151,6 +151,10 @@
5 SCMP_SYS(clock_gettime),
6 SCMP_SYS(close),
7 SCMP_SYS(clone),
8 +#ifdef __NR_clone3
9 + SCMP_SYS(clone3),
10 +#endif
11 + SCMP_SYS(rseq),
12 SCMP_SYS(dup),
13 SCMP_SYS(epoll_create),
14 SCMP_SYS(epoll_wait),