sarah
/
tor
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Permit the nanosleep system call in the seccomp2 callbox 

Fixes bug 24969; bugfix on 0.2.5.1-alpha when the sandbox was introduced.
This commit is contained in:
Nick Mathewson 2018-04-18 10:25:42 -04:00
parent d3ff126309
commit c4be6dfeab
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
changes/bug24969 Normal file
View File

@ -0,0 +1,3 @@
o Minor bugfixes (Linux seccomp2 sandbox):
- Allow the nanosleep() system call, which glibc uses to implement
sleep() and usleep(). Fixes bug 24969; bugfix on 0.2.5.1-alpha.

3
src/common/sandbox.c
View File

@ -185,6 +185,9 @@ static int filter_nopar_gen[] = {
SCMP_SYS(mmap),
#endif
SCMP_SYS(munmap),
#ifdef __NR_nanosleep
SCMP_SYS(nanosleep),
#endif
#ifdef __NR_prlimit
SCMP_SYS(prlimit),
#endif