[tor-bugs] #16244 [Tor]: (Sandbox) Unexpected syscalls on relay

[Tor Bug Tracker & Wiki]

#16244: (Sandbox) Unexpected syscalls on relay
------------------------+-----------------------------------
     Reporter:  asn     |      Owner:
         Type:  defect  |     Status:  needs_review
     Priority:  normal  |  Milestone:  Tor: 0.2.7.x-final
    Component:  Tor     |    Version:
   Resolution:          |   Keywords:  tor-sandbox tor-relay
Actual Points:          |  Parent ID:
       Points:          |
------------------------+-----------------------------------
Changes (by weasel):

 * status:  new => needs_review


Comment:

 At least it seems to run now:

 {{{
 --- a/src/common/sandbox.c
 +++ b/src/common/sandbox.c
 @@ -129,11 +129,13 @@ static int filter_nopar_gen[] = {
      SCMP_SYS(clone),
      SCMP_SYS(epoll_create),
      SCMP_SYS(epoll_wait),
 +    SCMP_SYS(eventfd2),
      SCMP_SYS(fcntl),
      SCMP_SYS(fstat),
  #ifdef __NR_fstat64
      SCMP_SYS(fstat64),
  #endif
 +    SCMP_SYS(futex),
      SCMP_SYS(getdents64),
      SCMP_SYS(getegid),
  #ifdef __NR_getegid32
 diff --git a/src/or/main.c b/src/or/main.c
 index d0fe8cb..8aa9a15 100644
 --- a/src/or/main.c
 +++ b/src/or/main.c
 @@ -2984,7 +2984,7 @@ sandbox_init_filter(void)
    // orport
    if (server_mode(get_options())) {
 ·
 -    OPEN_DATADIR2_SUFFIX("keys", "secret_id_key", "tmp");
 +    OPEN_DATADIR2_SUFFIX("keys", "secret_id_key", ".tmp");
      OPEN_DATADIR2_SUFFIX("keys", "secret_onion_key", ".tmp");
      OPEN_DATADIR2_SUFFIX("keys", "secret_onion_key_ntor", ".tmp");
      OPEN_DATADIR2("keys", "secret_id_key.old");
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16244#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online