]> git.ipfire.org Git - thirdparty/chrony.git/commit
projects / thirdparty / chrony.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 76a905d) | patch
sys_linux: fix seccomp filter for BINDTODEVICE option
authorMiroslav Lichvar <mlichvar@redhat.com>
Wed, 6 Oct 2021 08:02:34 +0000 (10:02 +0200)
committerMiroslav Lichvar <mlichvar@redhat.com>
Wed, 6 Oct 2021 08:09:35 +0000 (10:09 +0200)
commit29d7d3176d9d1b208039a9d2ca3f26bc3cc5a387
tree1effb485fac6458f9af9f21a5403607449b450e8tree
parent76a905d652cafccfac1023f74d12ffa7facc4832commit | diff
sys_linux: fix seccomp filter for BINDTODEVICE option

The BINDTODEVICE socket option is the first option in the seccomp filter
setting a string instead of int. Remove the length check from the
setsockopt rules to allow a device name longer than 3 characters.

This was reported in Debian bug #995207.

Fixes: b9f5ce83b02e ("sys_linux: allow BINDTODEVICE option in seccomp filter")
sys_linux.c diff | blob | blame | history
Mirror of https://git.tuxfamily.org/chrony/chrony.git