From: Roy Marples <roy@alpine.my.domain>
Date: Fri, 24 Feb 2023 10:17:27 +0000 (+0000)
Subject: privsep: Allow ioctl TIOCGWINSZ for dumping leases on musl
X-Git-Tag: v10.0.0~3^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=533ef88866187d6e0ac3465a9512a1a19f7f560d;p=thirdparty%2Fdhcpcd.git

privsep: Allow ioctl TIOCGWINSZ for dumping leases on musl

Fixes #186.
---

diff --git a/src/privsep-linux.c b/src/privsep-linux.c
index 2c541521..28d00974 100644
--- a/src/privsep-linux.c
+++ b/src/privsep-linux.c
@@ -30,7 +30,6 @@
 #include <sys/prctl.h>
 #include <sys/socket.h>
 #include <sys/syscall.h>
-#include <sys/termios.h>	/* For TCGETS */
 
 #include <linux/audit.h>
 #include <linux/filter.h>
@@ -40,10 +39,12 @@
 
 #include <errno.h>
 #include <fcntl.h>
+#include <signal.h>
 #include <stddef.h>
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>
+#include <termios.h>	/* For TCGETS */
 #include <unistd.h>
 
 #include "common.h"
@@ -348,6 +349,8 @@ static struct sock_filter ps_seccomp_filter[] = {
 	SECCOMP_ALLOW_ARG(__NR_ioctl, 1, SIOCGIFVLAN),
 	/* printf over serial terminal requires this */
 	SECCOMP_ALLOW_ARG(__NR_ioctl, 1, TCGETS),
+	/* dumping leases on musl requires this */
+	SECCOMP_ALLOW_ARG(__NR_ioctl, 1, TIOCGWINSZ),
 	/* SECCOMP BPF is newer than nl80211 so we don't need SIOCGIWESSID
 	 * which lives in the impossible to include linux/wireless.h header */
 #endif