From: Miroslav Lichvar Date: Wed, 21 Sep 2016 08:35:57 +0000 (+0200) Subject: sys_linux: allow getdents in seccomp filter X-Git-Tag: 3.0-pre1~100 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=411f4697ca068bf9e1514c50cc4af51487cc7414;p=thirdparty%2Fchrony.git sys_linux: allow getdents in seccomp filter This is needed for glob(), which is used with the include and dumpdir directives. --- diff --git a/sys_linux.c b/sys_linux.c index c4f5c14a..8f407db7 100644 --- a/sys_linux.c +++ b/sys_linux.c @@ -463,9 +463,9 @@ SYS_Linux_EnableSystemCallFilter(int level) SCMP_SYS(mprotect), SCMP_SYS(mremap), SCMP_SYS(munmap), SCMP_SYS(shmdt), /* Filesystem */ SCMP_SYS(access), SCMP_SYS(chmod), SCMP_SYS(chown), SCMP_SYS(chown32), - SCMP_SYS(fstat), SCMP_SYS(fstat64), SCMP_SYS(lseek), SCMP_SYS(rename), - SCMP_SYS(stat), SCMP_SYS(stat64), SCMP_SYS(statfs), SCMP_SYS(statfs64), - SCMP_SYS(unlink), + SCMP_SYS(fstat), SCMP_SYS(fstat64), SCMP_SYS(getdents), SCMP_SYS(getdents64), + SCMP_SYS(lseek), SCMP_SYS(rename), SCMP_SYS(stat), SCMP_SYS(stat64), + SCMP_SYS(statfs), SCMP_SYS(statfs64), SCMP_SYS(unlink), /* Socket */ SCMP_SYS(bind), SCMP_SYS(connect), SCMP_SYS(getsockname), SCMP_SYS(recvfrom), SCMP_SYS(recvmmsg), SCMP_SYS(recvmsg),