Allow (but return EACCES) fstatat64 in sandbox.

This is apparently used in some configurations of OpenSSL when glibc
has getrandom().  bz#3276, patch from Kris Karas, ok djm@

diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
index d8dc7120bdd42f56bab21d7f2e2a3683293e7183..7981c84ad10c37f69f02de16feefa9fb66ec8b11 100644 (file)
--- a/sandbox-seccomp-filter.c
+++ b/sandbox-seccomp-filter.c
@@ -154,6 +154,9 @@ static const struct sock_filter preauth_insns[] = {
 #ifdef __NR_fstat64
        SC_DENY(__NR_fstat64, EACCES),
 #endif
+#ifdef __NR_fstatat64
+       SC_DENY(__NR_fstatat64, EACCES),
+#endif
 #ifdef __NR_open
        SC_DENY(__NR_open, EACCES),
 #endif