commit: e2378b8c6bef5d94805444797e7fe35c07f54783 Author: Sergei Trofimovich <slyfox <AT> gentoo <DOT> org> AuthorDate: Wed Feb 3 19:44:37 2021 +0000 Commit: Sergei Trofimovich <slyfox <AT> gentoo <DOT> org> CommitDate: Wed Feb 3 19:44:37 2021 +0000 URL: https://gitweb.gentoo.org/proj/pax-utils.git/commit/?id=e2378b8c
security.c: allow faccessat2 syscall in seccomt filters Under glibc-2.33 sandox uses faccessat2 to stat symlinks. Reported-by: Cănărău Constantin Bug: https://bugs.gentoo.org/768435 Signed-off-by: Sergei Trofimovich <slyfox <AT> gentoo.org> security.c | 1 + 1 file changed, 1 insertion(+) diff --git a/security.c b/security.c index ab8a499..8315023 100644 --- a/security.c +++ b/security.c @@ -156,6 +156,7 @@ static void pax_seccomp_init(bool allow_forking) SCMP_SYS(readlink), SCMP_SYS(readlinkat), SCMP_SYS(getcwd), + SCMP_SYS(faccessat2), /* Syscalls listed because of fakeroot. */ SCMP_SYS(msgget),
