GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-02-09 16:26:59 +08:00
Code Issues Packages Projects Releases Wiki Activity

disable_system_calls: added newfstatat unconditionally

Browse Source 
It is required in newer glibc.

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
This commit is contained in:
Nikos Mavrogiannopoulos
2021-06-12 22:23:08 +02:00
parent 4bfb42cb34
commit add3272c1d
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
src/worker-privs.c
View File

@@ -112,7 +112,6 @@ int disable_system_calls(struct worker_st *ws)
if (getenv("SOCKET_WRAPPER_DIR") != NULL) {
ADD_SYSCALL(stat64, 0);
ADD_SYSCALL(readlink, 0);
ADD_SYSCALL(newfstatat, 0);
}
/* we use quite some system calls here, and in the end
@@ -176,6 +175,7 @@ int disable_system_calls(struct worker_st *ws)
ADD_SYSCALL(openat, 0);
ADD_SYSCALL(fstat, 0);
ADD_SYSCALL(newfstatat, 0);
ADD_SYSCALL(lseek, 0);
ADD_SYSCALL(getsockopt, 0);
@@ -188,7 +188,6 @@ int disable_system_calls(struct worker_st *ws)
if (vhost->perm_config.config->xml_config_file) {
ADD_SYSCALL(stat, 0);
ADD_SYSCALL(stat64, 0);
ADD_SYSCALL(newfstatat, 0);
ADD_SYSCALL(open, 0);
ADD_SYSCALL(openat, 0);
break;