]> git.ipfire.org Git - thirdparty/tor.git/commitdiff
Use the proper syscall in sandbox error messages
authorcypherpunks <cypherpunks@torproject.org>
Wed, 28 Jun 2017 12:35:01 +0000 (12:35 +0000)
committerNick Mathewson <nickm@torproject.org>
Wed, 5 Jul 2017 13:56:28 +0000 (09:56 -0400)
Fixes #22750.

changes/ticket22750 [new file with mode: 0644]
src/common/sandbox.c

diff --git a/changes/ticket22750 b/changes/ticket22750
new file mode 100644 (file)
index 0000000..6bc1fb2
--- /dev/null
@@ -0,0 +1,3 @@
+  o Minor bugfixes (logging, sandbox):
+    - Use the correct system call in sandbox error messages. Fixes bug
+      22750; bugfix on 0.2.5.1-alpha.
index 52caa4fcc61f853642e57bb3cbb7f8c294f10081..fb57902593a287fd08b0edb7e576c388bb1ff73a 100644 (file)
@@ -480,7 +480,7 @@ sb_chmod(scmp_filter_ctx ctx, sandbox_cfg_t *filter)
       rc = seccomp_rule_add_1(ctx, SCMP_ACT_ALLOW, SCMP_SYS(chmod),
             SCMP_CMP_STR(0, SCMP_CMP_EQ, param->value));
       if (rc != 0) {
-        log_err(LD_BUG,"(Sandbox) failed to add open syscall, received "
+        log_err(LD_BUG,"(Sandbox) failed to add chmod syscall, received "
             "libseccomp error %d", rc);
         return rc;
       }
@@ -505,7 +505,7 @@ sb_chown(scmp_filter_ctx ctx, sandbox_cfg_t *filter)
       rc = seccomp_rule_add_1(ctx, SCMP_ACT_ALLOW, SCMP_SYS(chown),
             SCMP_CMP_STR(0, SCMP_CMP_EQ, param->value));
       if (rc != 0) {
-        log_err(LD_BUG,"(Sandbox) failed to add open syscall, received "
+        log_err(LD_BUG,"(Sandbox) failed to add chown syscall, received "
             "libseccomp error %d", rc);
         return rc;
       }
@@ -1037,7 +1037,7 @@ sb_stat64(scmp_filter_ctx ctx, sandbox_cfg_t *filter)
       rc = seccomp_rule_add_1(ctx, SCMP_ACT_ALLOW, SCMP_SYS(stat64),
           SCMP_CMP_STR(0, SCMP_CMP_EQ, param->value));
       if (rc != 0) {
-        log_err(LD_BUG,"(Sandbox) failed to add open syscall, received "
+        log_err(LD_BUG,"(Sandbox) failed to add stat64 syscall, received "
             "libseccomp  error %d", rc);
         return rc;
       }