From c4da0a5094e21241db8ce0d8b12c2e4272fa49ef Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Thu, 9 Apr 2020 08:33:11 -0400 Subject: [PATCH] Add fsync to list of syscalls permitted by sandbox (Our fix for 33087 requires this, I believe.) --- src/lib/sandbox/sandbox.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/lib/sandbox/sandbox.c b/src/lib/sandbox/sandbox.c index 1d2c40c753..626a4dc5a5 100644 --- a/src/lib/sandbox/sandbox.c +++ b/src/lib/sandbox/sandbox.c @@ -166,6 +166,7 @@ static int filter_nopar_gen[] = { #ifdef __NR_fstat64 SCMP_SYS(fstat64), #endif + SCMP_SYS(fsync), SCMP_SYS(futex), SCMP_SYS(getdents), SCMP_SYS(getdents64),