diff options
| author | V3n3RiX <venerix@koprulu.sector> | 2022-12-31 14:19:51 +0000 |
|---|---|---|
| committer | V3n3RiX <venerix@koprulu.sector> | 2022-12-31 14:19:51 +0000 |
| commit | ea5bad4d0ba1eb937df22adb7f6cc57ea77f03d8 (patch) | |
| tree | 444d798059985f0e993cb7582231243cd4c5d083 /sys-apps/file/files/file-5.43-portage-sandbox.patch | |
| parent | 6989a301768c924a6014fdce19b28de541ad557a (diff) | |
gentoo auto-resync : 31:12:2022 - 14:19:51
Diffstat (limited to 'sys-apps/file/files/file-5.43-portage-sandbox.patch')
| -rw-r--r-- | sys-apps/file/files/file-5.43-portage-sandbox.patch | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/sys-apps/file/files/file-5.43-portage-sandbox.patch b/sys-apps/file/files/file-5.43-portage-sandbox.patch new file mode 100644 index 000000000000..f9e715cc366f --- /dev/null +++ b/sys-apps/file/files/file-5.43-portage-sandbox.patch @@ -0,0 +1,28 @@ +Allow syscalls for Gentoo's portage sandbox + +- Add getcwd (bug #728978) +- Add faccessat2 (bug #889046) + +Bug: https://bugs.gentoo.org/728978 +Bug: https://bugs.gentoo.org/889046 +--- a/src/seccomp.c ++++ b/src/seccomp.c +@@ -174,6 +174,9 @@ enable_sandbox_full(void) + ALLOW_RULE(exit_group); + #ifdef __NR_faccessat + ALLOW_RULE(faccessat); ++#endif ++#ifdef __NR_faccessat2 ++ ALLOW_RULE(faccessat2); + #endif + ALLOW_RULE(fcntl); + ALLOW_RULE(fcntl64); +@@ -237,6 +240,8 @@ enable_sandbox_full(void) + ALLOW_RULE(write); + ALLOW_RULE(writev); + ++ // needed by Gentoo's portage sandbox ++ ALLOW_RULE(getcwd); + + #if 0 + // needed by valgrind |