changeset 5471:5de03fd31eb1 draft

privsep: Allow __NR_mmap for seccomp Some malloc implementations might use it rather than brk.
author Roy Marples <roy@marples.name>
date Mon, 21 Sep 2020 11:20:46 +0100
parents d7a5671d08c5
children 578cd75c91e8
files src/privsep-linux.c
diffstat 1 files changed, 3 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/src/privsep-linux.c	Sun Sep 20 21:22:49 2020 +0100
+++ b/src/privsep-linux.c	Mon Sep 21 11:20:46 2020 +0100
@@ -238,6 +238,9 @@
 	/* SECCOMP BPF is newer than nl80211 so we don't need SIOCGIWESSID
 	 * which lives in the impossible to include linux/wireless.h header */
 #endif
+#ifdef __NR_mmap
+	SECCOMP_ALLOW(__NR_mmap),
+#endif
 #ifdef __NR_munmap
 	SECCOMP_ALLOW(__NR_munmap),
 #endif