Make the sandbox code allow the writev() syscall.

Tor doesn't use it directly, but the glibc backtrace-to-fd code does

diff --git a/src/common/sandbox.c b/src/common/sandbox.c
index 5775289882e47116c99d90b900543483fa2d1432..0a7a129b544f14c9f558a310bf2e7d6299128d7d 100644 (file)
--- a/src/common/sandbox.c
+++ b/src/common/sandbox.c
@@ -119,6 +119,7 @@ static int filter_nopar_gen[] = {
     SCMP_SYS(stat),
     SCMP_SYS(uname),
     SCMP_SYS(write),
+    SCMP_SYS(writev),
     SCMP_SYS(exit_group),
     SCMP_SYS(exit),