# HG changeset patch # User Roy Marples # Date 1607794545 0 # Node ID ecfe552000c0eadd4d2b2e138f4dd1f23118c81b # Parent 301bcad7c7108241abab6ca14e1566df3e6a21e1 privsep: Allow getsockopt for SO_RCVBUF on Linux For when the link socket overflows diff -r 301bcad7c710 -r ecfe552000c0 src/privsep-linux.c --- a/src/privsep-linux.c Sat Dec 12 17:34:31 2020 +0000 +++ b/src/privsep-linux.c Sat Dec 12 17:35:45 2020 +0000 @@ -28,6 +28,7 @@ #include #include +#include #include #include /* For TCGETS */ @@ -252,6 +253,11 @@ #ifdef __NR_getpid SECCOMP_ALLOW(__NR_getpid), #endif +#ifdef __NR_getsockopt + /* For route socket overflow */ + SECCOMP_ALLOW_ARG(__NR_getsockopt, 1, SOL_SOCKET), + SECCOMP_ALLOW_ARG(__NR_getsockopt, 2, SO_RCVBUF), +#endif #ifdef __NR_ioctl SECCOMP_ALLOW_ARG(__NR_ioctl, 1, SIOCGIFFLAGS), SECCOMP_ALLOW_ARG(__NR_ioctl, 1, SIOCGIFHWADDR),