summaryrefslogtreecommitdiff
path: root/net-misc/chrony/files/chrony-4.2-seccomp-rseq.patch
diff options
context:
space:
mode:
authorV3n3RiX <venerix@koprulu.sector>2022-12-22 01:55:45 +0000
committerV3n3RiX <venerix@koprulu.sector>2022-12-22 01:55:45 +0000
commitb2c59335bfbeb25c5644f32172e1e9b23c447710 (patch)
tree0e8e19f47e39be0a7b9b06cb86db760c6d6b5965 /net-misc/chrony/files/chrony-4.2-seccomp-rseq.patch
parent427ba64bd6bcdd59a1ae9bc7c5cec0299d135413 (diff)
gentoo auto-resync : 22:12:2022 - 01:55:45
Diffstat (limited to 'net-misc/chrony/files/chrony-4.2-seccomp-rseq.patch')
-rw-r--r--net-misc/chrony/files/chrony-4.2-seccomp-rseq.patch30
1 files changed, 0 insertions, 30 deletions
diff --git a/net-misc/chrony/files/chrony-4.2-seccomp-rseq.patch b/net-misc/chrony/files/chrony-4.2-seccomp-rseq.patch
deleted file mode 100644
index e36a7b33186a..000000000000
--- a/net-misc/chrony/files/chrony-4.2-seccomp-rseq.patch
+++ /dev/null
@@ -1,30 +0,0 @@
-https://git.tuxfamily.org/chrony/chrony.git/patch/?id=8bb8f15a7d049ed26c69d95087065b381f76ec4d
-
-From: Michael Hudson-Doyle <michael.hudson@canonical.com>
-Date: Wed, 9 Feb 2022 09:06:13 +0100
-Subject: sys_linux: allow rseq in seccomp filter
-
-Libc 2.35 will use rseq syscalls [1][2] by default and thereby
-break chrony in seccomp isolation.
-
-[1]: https://www.efficios.com/blog/2019/02/08/linux-restartable-sequences/
-[2]: https://sourceware.org/pipermail/libc-alpha/2022-February/136040.html
-
-Tested-by: Christian Ehrhardt <christian.ehrhardt@canonical.com>
-Reviewed-by: Christian Ehrhardt <christian.ehrhardt@canonical.com>
-Signed-off-by: Michael Hudson-Doyle <michael.hudson@canonical.com>
-Signed-off-by: Christian Ehrhardt <christian.ehrhardt@canonical.com>
-
---- a/sys_linux.c
-+++ b/sys_linux.c
-@@ -497,6 +497,9 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
- SCMP_SYS(getrlimit),
- SCMP_SYS(getuid),
- SCMP_SYS(getuid32),
-+#ifdef __NR_rseq
-+ SCMP_SYS(rseq),
-+#endif
- SCMP_SYS(rt_sigaction),
- SCMP_SYS(rt_sigreturn),
- SCMP_SYS(rt_sigprocmask),
-cgit v0.10.2