From: Nick Mathewson <nickm@torproject.org>
Date: Wed, 18 Apr 2018 14:25:42 +0000 (-0400)
Subject: Permit the nanosleep system call in the seccomp2 callbox
X-Git-Tag: tor-0.2.9.16~23^2^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=c4be6dfeabc8d42ecb6ccea8ca44d1ff0835071a;p=thirdparty%2Ftor.git

Permit the nanosleep system call in the seccomp2 callbox

Fixes bug 24969; bugfix on 0.2.5.1-alpha when the sandbox was introduced.
---

diff --git a/changes/bug24969 b/changes/bug24969
new file mode 100644
index 0000000000..46b2bae6f4
--- /dev/null
+++ b/changes/bug24969
@@ -0,0 +1,3 @@
+  o Minor bugfixes (Linux seccomp2 sandbox):
+    - Allow the nanosleep() system call, which glibc uses to implement
+      sleep() and usleep(). Fixes bug 24969; bugfix on 0.2.5.1-alpha.
diff --git a/src/common/sandbox.c b/src/common/sandbox.c
index 87fe08e881..3d27ea66b5 100644
--- a/src/common/sandbox.c
+++ b/src/common/sandbox.c
@@ -185,6 +185,9 @@ static int filter_nopar_gen[] = {
     SCMP_SYS(mmap),
 #endif
     SCMP_SYS(munmap),
+#ifdef __NR_nanosleep
+    SCMP_SYS(nanosleep),
+#endif
 #ifdef __NR_prlimit
     SCMP_SYS(prlimit),
 #endif