[tor-commits] [tor/master] Add fsync to list of syscalls permitted by sandbox

nickm at torproject.org nickm at torproject.org
Thu Apr 9 12:36:14 UTC 2020


commit c4da0a5094e21241db8ce0d8b12c2e4272fa49ef
Author: Nick Mathewson <nickm at torproject.org>
Date:   Thu Apr 9 08:33:11 2020 -0400

    Add fsync to list of syscalls permitted by sandbox
    
    (Our fix for 33087 requires this, I believe.)
---
 src/lib/sandbox/sandbox.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/lib/sandbox/sandbox.c b/src/lib/sandbox/sandbox.c
index 1d2c40c75..626a4dc5a 100644
--- a/src/lib/sandbox/sandbox.c
+++ b/src/lib/sandbox/sandbox.c
@@ -166,6 +166,7 @@ static int filter_nopar_gen[] = {
 #ifdef __NR_fstat64
     SCMP_SYS(fstat64),
 #endif
+    SCMP_SYS(fsync),
     SCMP_SYS(futex),
     SCMP_SYS(getdents),
     SCMP_SYS(getdents64),





More information about the tor-commits mailing list