mirror of
https://github.com/OpenFusionProject/OpenFusion.git
synced 2024-11-14 10:20:05 +00:00
[seccomp] Allow clock_nanosleep()
This apparently gets called very rarely during normal operation. This change fixes a rare server crash.
This commit is contained in:
parent
3c6afa0322
commit
f376c68115
@ -172,6 +172,7 @@ static sock_filter filter[] = {
|
|||||||
ALLOW_SYSCALL(exit),
|
ALLOW_SYSCALL(exit),
|
||||||
ALLOW_SYSCALL(exit_group),
|
ALLOW_SYSCALL(exit_group),
|
||||||
ALLOW_SYSCALL(rt_sigprocmask), // musl-libc
|
ALLOW_SYSCALL(rt_sigprocmask), // musl-libc
|
||||||
|
ALLOW_SYSCALL(clock_nanosleep), // gets called very rarely
|
||||||
|
|
||||||
// to crash properly on SIGSEGV
|
// to crash properly on SIGSEGV
|
||||||
DENY_SYSCALL_ERRNO(tgkill, EPERM),
|
DENY_SYSCALL_ERRNO(tgkill, EPERM),
|
||||||
@ -247,6 +248,9 @@ static sock_filter filter[] = {
|
|||||||
#ifdef __NR_sigreturn
|
#ifdef __NR_sigreturn
|
||||||
ALLOW_SYSCALL(sigreturn), // vdso
|
ALLOW_SYSCALL(sigreturn), // vdso
|
||||||
#endif
|
#endif
|
||||||
|
#ifdef __NR_clock_nanosleep_time64
|
||||||
|
ALLOW_SYSCALL(clock_nanosleep_time64), // maybe
|
||||||
|
#endif
|
||||||
|
|
||||||
KILL_PROCESS
|
KILL_PROCESS
|
||||||
};
|
};
|
||||||
|
Loading…
Reference in New Issue
Block a user