From: pmu-ipf <peter.mueller@ipfire.org>
Date: Sat, 30 Apr 2022 11:10:04 +0000 (+0000)
Subject: sandbox: Permit rseq syscall as well
X-Git-Tag: tor-0.4.5.13~12^2~1
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=d422a66f8759b2edd8d85df219e8a183058268e8;p=thirdparty%2Ftor.git

sandbox: Permit rseq syscall as well

This was found to be necessary in conjunction with glibc 2.35 on Linux.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
---

diff --git a/src/lib/sandbox/sandbox.c b/src/lib/sandbox/sandbox.c
index e6e556eb59..7a57554ace 100644
--- a/src/lib/sandbox/sandbox.c
+++ b/src/lib/sandbox/sandbox.c
@@ -227,6 +227,9 @@ static int filter_nopar_gen[] = {
 #endif
     SCMP_SYS(read),
     SCMP_SYS(rt_sigreturn),
+#ifdef __NR_rseq
+    SCMP_SYS(rseq),
+#endif
     SCMP_SYS(sched_getaffinity),
 #ifdef __NR_sched_yield
     SCMP_SYS(sched_yield),