comparison src/privsep-linux.c @ 5541:f233c9381c56 draft

privsep: Allow ioctl TCGETS printf on some platforms seems to require it. Without this, script_dump() may fault.
author Matthew Clarkson <mclarkson@reliablecontrols.com>
date Thu, 19 Nov 2020 15:37:33 +0000
parents a6ee95eb8e60
children 5b709860f86c
comparison
equal deleted inserted replaced
5540:a6ee95eb8e60 5541:f233c9381c56
255 SECCOMP_ALLOW_ARG(__NR_ioctl, 1, SIOCGIFFLAGS), 255 SECCOMP_ALLOW_ARG(__NR_ioctl, 1, SIOCGIFFLAGS),
256 SECCOMP_ALLOW_ARG(__NR_ioctl, 1, SIOCGIFHWADDR), 256 SECCOMP_ALLOW_ARG(__NR_ioctl, 1, SIOCGIFHWADDR),
257 SECCOMP_ALLOW_ARG(__NR_ioctl, 1, SIOCGIFINDEX), 257 SECCOMP_ALLOW_ARG(__NR_ioctl, 1, SIOCGIFINDEX),
258 SECCOMP_ALLOW_ARG(__NR_ioctl, 1, SIOCGIFMTU), 258 SECCOMP_ALLOW_ARG(__NR_ioctl, 1, SIOCGIFMTU),
259 SECCOMP_ALLOW_ARG(__NR_ioctl, 1, SIOCGIFVLAN), 259 SECCOMP_ALLOW_ARG(__NR_ioctl, 1, SIOCGIFVLAN),
260 /* printf on some platforms seems to use this ioctl */
261 SECCOMP_ALLOW_ARG(__NR_ioctl, 1, TCGETS),
260 /* SECCOMP BPF is newer than nl80211 so we don't need SIOCGIWESSID 262 /* SECCOMP BPF is newer than nl80211 so we don't need SIOCGIWESSID
261 * which lives in the impossible to include linux/wireless.h header */ 263 * which lives in the impossible to include linux/wireless.h header */
262 #endif 264 #endif
263 #ifdef __NR_mmap 265 #ifdef __NR_mmap
264 SECCOMP_ALLOW(__NR_mmap), 266 SECCOMP_ALLOW(__NR_mmap),