[tor-bugs] #29819 [Core Tor/Tor]: Seccomp: sandbox crash on rt_sigaction with libseccomp 0.2.4

[Tor Bug Tracker & Wiki]

#29819: Seccomp: sandbox crash on rt_sigaction with libseccomp 0.2.4
-----------------------------------+------------------------------------
 Reporter:  toralf                 |          Owner:  nickm
     Type:  defect                 |         Status:  assigned
 Priority:  Medium                 |      Milestone:  Tor: 0.4.0.x-final
Component:  Core Tor/Tor           |        Version:  Tor: unspecified
 Severity:  Normal                 |     Resolution:
 Keywords:  crash, linux, sandbox  |  Actual Points:
Parent ID:                         |         Points:  0.2
 Reviewer:                         |        Sponsor:
-----------------------------------+------------------------------------

Comment (by pege):

 Thanks, nickm, for the pointers. Still trying to understand how the
 sandbox works.

 I went through all the comments on GitHub again and I thinks
 [https://github.com/seccomp/libseccomp/issues/148#issuecomment-481088849
 this comment] here could explain the issue. At least when also considering
 [https://github.com/seccomp/libseccomp/issues/148#issuecomment-481089868
 this comment] that hints that there is not really a fixed order in which
 rules are applied. I guess merging path checks and flag checks may be
 worth a try. I'll try that on the weekend unless someone wants to do that
 now.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/29819#comment:18>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online