diff options
| author |   Anthony G. Basile <blueness@gentoo.org> | 2018-02-28 08:23:16 -0500 |
|---|---|---|
| committer | Anthony G. Basile <blueness@gentoo.org> | 2018-02-28 08:23:36 -0500 |
| commit | 33b69061f73aa4c921ecb0d3ac371484f76620b7 (patch) | |
| tree | 50549d3cf3ca1f34aabc33f999a74c46b8863edb /net-misc/ntpsec/files | |
| parent | app-office/gnucash: Bump to 2.7.5 (diff) | |
| download | gentoo-33b69061f73aa4c921ecb0d3ac371484f76620b7.tar.gz gentoo-33b69061f73aa4c921ecb0d3ac371484f76620b7.tar.bz2 gentoo-33b69061f73aa4c921ecb0d3ac371484f76620b7.zip | |
net-misc/ntpsec: backport fix for seccomp + early-droproot
See: https://gitlab.com/NTPsec/ntpsec/issues/460
Package-Manager: Portage-2.3.19, Repoman-2.3.6
Diffstat (limited to 'net-misc/ntpsec/files')
| -rw-r--r-- | net-misc/ntpsec/files/ntpsec-1.0.0-fix-seccomp.patch | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/net-misc/ntpsec/files/ntpsec-1.0.0-fix-seccomp.patch b/net-misc/ntpsec/files/ntpsec-1.0.0-fix-seccomp.patch new file mode 100644 index 000000000000..b9716569f631 --- /dev/null +++ b/net-misc/ntpsec/files/ntpsec-1.0.0-fix-seccomp.patch @@ -0,0 +1,16 @@ +This is a backport of https://gitlab.com/NTPsec/ntpsec/commit/eef92d6217da03ad2ae41e298d110bdb05031381 + +diff -Naur ntpsec-1.0.0.orig/ntpd/ntp_sandbox.c ntpsec-1.0.0/ntpd/ntp_sandbox.c +--- ntpsec-1.0.0.orig/ntpd/ntp_sandbox.c 2017-10-09 23:54:39.000000000 -0400 ++++ ntpsec-1.0.0/ntpd/ntp_sandbox.c 2018-02-28 07:31:28.381406881 -0500 +@@ -354,6 +354,10 @@ + SCMP_SYS(write), + SCMP_SYS(unlink), + ++#ifdef ENABLE_EARLY_DROPROOT ++ SCMP_SYS(getdents), ++#endif ++ + #ifdef ENABLE_DNS_LOOKUP + /* Don't comment out this block for testing. + * pthread_create blocks signals so it will crash |