summaryrefslogtreecommitdiff
path: root/net-ftp/vsftpd/files/vsftpd-disable-seccomp-sandbox.patch
diff options
context:
space:
mode:
Diffstat (limited to 'net-ftp/vsftpd/files/vsftpd-disable-seccomp-sandbox.patch')
-rw-r--r--net-ftp/vsftpd/files/vsftpd-disable-seccomp-sandbox.patch15
1 files changed, 15 insertions, 0 deletions
diff --git a/net-ftp/vsftpd/files/vsftpd-disable-seccomp-sandbox.patch b/net-ftp/vsftpd/files/vsftpd-disable-seccomp-sandbox.patch
new file mode 100644
index 000000000000..10266e36a87e
--- /dev/null
+++ b/net-ftp/vsftpd/files/vsftpd-disable-seccomp-sandbox.patch
@@ -0,0 +1,15 @@
+Disable buggy seccomp sandbox code by default
+
+Bug: https://bugs.gentoo.org/443898
+
+--- a/tunables.c
++++ b/tunables.c
+@@ -226,7 +226,7 @@
+ tunable_isolate_network = 1;
+ tunable_ftp_enable = 1;
+ tunable_http_enable = 0;
+- tunable_seccomp_sandbox = 1;
++ tunable_seccomp_sandbox = 0;
+ tunable_allow_writeable_chroot = 0;
+
+ tunable_accept_timeout = 60;