From: Miroslav Lichvar <mlichvar@redhat.com>
Date: Mon, 27 Jul 2020 07:56:53 +0000 (+0200)
Subject: nts: move loading of syscall filter in NTS-KE server
X-Git-Tag: 4.0-pre3~40
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=be503bbcf6b003e7e0cf7c1dcfeaef42ce58e350;p=thirdparty%2Fchrony.git

nts: move loading of syscall filter in NTS-KE server

Load the filter after NKS_Initialise() to avoid hitting
a fcntl syscall.

Fixes: 66e097e3e644 ("nts: improve NTS-KE server/client code")
---

diff --git a/nts_ke_server.c b/nts_ke_server.c
index 1049da00..67500f41 100644
--- a/nts_ke_server.c
+++ b/nts_ke_server.c
@@ -641,12 +641,12 @@ run_helper(uid_t uid, gid_t gid, int scfilter_level)
   if (!geteuid() && (uid || gid))
     SYS_DropRoot(uid, gid);
 
+  NKS_Initialise();
+
   UTI_SetQuitSignalsHandler(helper_signal, 1);
   if (scfilter_level != 0)
     SYS_EnableSystemCallFilter(scfilter_level, SYS_NTSKE_HELPER);
 
-  NKS_Initialise();
-
   SCH_MainLoop();
 
   DEBUG_LOG("Helper exiting");