diff options
| author |   Mike Frysinger <vapier@gentoo.org> | 2015-09-11 23:56:23 -0400 |
|---|---|---|
| committer | Mike Frysinger <vapier@gentoo.org> | 2015-09-11 23:56:23 -0400 |
| commit | ee6925b66697de51d6aa9ecfde56a95129150035 (patch) | |
| tree | a71946a553da0f9ec4277f5dcd6783258163601e | |
| parent | security: do not warn when seccomp is disabled in the kernel (diff) | |
| download | pax-utils-ee6925b66697de51d6aa9ecfde56a95129150035.tar.gz pax-utils-ee6925b66697de51d6aa9ecfde56a95129150035.tar.bz2 pax-utils-ee6925b66697de51d6aa9ecfde56a95129150035.zip | |
security: whitelist dup syscallsv1.1.2
These are used by freopen internally, so whitelist them all.
They're pretty benign at any rate.
| -rw-r--r-- | security.c | 3 |
1 files changed, 3 insertions, 0 deletions
@@ -109,6 +109,9 @@ static void pax_seccomp_init(bool allow_forking) SCMP_SYS(brk), SCMP_SYS(capget), SCMP_SYS(chdir), + SCMP_SYS(dup), + SCMP_SYS(dup2), + SCMP_SYS(dup3), SCMP_SYS(exit), SCMP_SYS(exit_group), SCMP_SYS(faccessat), |