]> git.ipfire.org Git - thirdparty/tor.git/commit
Use SCMP_CMP_MASKED_EQ to allow flags, not force them
authorNick Mathewson <nickm@torproject.org>
Wed, 16 Apr 2014 19:17:23 +0000 (15:17 -0400)
committerNick Mathewson <nickm@torproject.org>
Thu, 17 Apr 2014 02:03:10 +0000 (22:03 -0400)
commit69eb2788302aa96e7d37597c407e8f7da4e8a96f
treeafba1d2443b9137c203e4afab8004891235e89fd
parentce776cf2700e5bb484630bc287b31204162adfac
Use SCMP_CMP_MASKED_EQ to allow flags, not force them

Older versions of Libevent are happy to open SOCK_DGRAM sockets
non-cloexec and non-nonblocking, and then set those flags
afterwards. It's nice to be able to allow a flag to be on or off in
the sandbox without having to enumerate all its values.

Also, permit PF_INET6 sockets. (D'oh!)
src/common/sandbox.c