mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2024-11-10 05:03:43 +01:00
Sandbox: Permit the clone3 system call
Apparently glibc-2.34 uses clone3, when previously it just used clone. Closes ticket #40590.
This commit is contained in:
parent
421ce94395
commit
de3872656a
3
changes/clone3-sandbox
Normal file
3
changes/clone3-sandbox
Normal file
@ -0,0 +1,3 @@
|
||||
o Minor features (linux seccomp2 sandbox):
|
||||
- Permit the clone3 syscall, which is apparently used in glibc-2.34 and
|
||||
later. Closes ticket 40590.
|
@ -144,6 +144,9 @@ static int filter_nopar_gen[] = {
|
||||
SCMP_SYS(clock_gettime),
|
||||
SCMP_SYS(close),
|
||||
SCMP_SYS(clone),
|
||||
#ifdef __NR_clone3
|
||||
SCMP_SYS(clone3),
|
||||
#endif
|
||||
SCMP_SYS(epoll_create),
|
||||
SCMP_SYS(epoll_wait),
|
||||
#ifdef __NR_epoll_pwait
|
||||
|
Loading…
Reference in New Issue
Block a user