diff src/privsep-linux.c @ 5541:f233c9381c56 draft

privsep: Allow ioctl TCGETS printf on some platforms seems to require it. Without this, script_dump() may fault.
author Matthew Clarkson <mclarkson@reliablecontrols.com>
date Thu, 19 Nov 2020 15:37:33 +0000
parents a6ee95eb8e60
children 5b709860f86c
line wrap: on
line diff
--- a/src/privsep-linux.c	Fri Nov 13 08:22:42 2020 +0000
+++ b/src/privsep-linux.c	Thu Nov 19 15:37:33 2020 +0000
@@ -257,6 +257,8 @@
 	SECCOMP_ALLOW_ARG(__NR_ioctl, 1, SIOCGIFINDEX),
 	SECCOMP_ALLOW_ARG(__NR_ioctl, 1, SIOCGIFMTU),
 	SECCOMP_ALLOW_ARG(__NR_ioctl, 1, SIOCGIFVLAN),
+	/* printf on some platforms seems to use this ioctl */
+	SECCOMP_ALLOW_ARG(__NR_ioctl, 1, TCGETS),
 	/* SECCOMP BPF is newer than nl80211 so we don't need SIOCGIWESSID
 	 * which lives in the impossible to include linux/wireless.h header */
 #endif