From: Miroslav Lichvar <mlichvar@redhat.com>
Date: Wed, 18 Nov 2015 11:42:38 +0000 (+0100)
Subject: sys_linux: allow ioctl(TCGETS) in seccomp filter
X-Git-Tag: 2.3-pre1~96
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f21e5f6cc5778d7a8afe4f3637519e7ce738e834;p=thirdparty%2Fchrony.git

sys_linux: allow ioctl(TCGETS) in seccomp filter

This seems to be needed to allow fopen() called on /dev/urandom to check
if it's a terminal.
---

diff --git a/sys_linux.c b/sys_linux.c
index 3039a2cc..8ac73028 100644
--- a/sys_linux.c
+++ b/sys_linux.c
@@ -504,7 +504,7 @@ SYS_Linux_EnableSystemCallFilter(int level)
   const static int fcntls[] = { F_GETFD, F_SETFD };
 
   const static unsigned long ioctls[] = {
-    FIONREAD,
+    FIONREAD, TCGETS,
 #ifdef FEAT_PPS
     PTP_SYS_OFFSET,
 #endif