summaryrefslogtreecommitdiff
path: root/net-misc/ntpsec/files/ntpsec-1.2.0-seccomp.patch
diff options
context:
space:
mode:
Diffstat (limited to 'net-misc/ntpsec/files/ntpsec-1.2.0-seccomp.patch')
-rw-r--r--net-misc/ntpsec/files/ntpsec-1.2.0-seccomp.patch30
1 files changed, 30 insertions, 0 deletions
diff --git a/net-misc/ntpsec/files/ntpsec-1.2.0-seccomp.patch b/net-misc/ntpsec/files/ntpsec-1.2.0-seccomp.patch
new file mode 100644
index 000000000000..6e61a06e12d1
--- /dev/null
+++ b/net-misc/ntpsec/files/ntpsec-1.2.0-seccomp.patch
@@ -0,0 +1,30 @@
+https://bugs.gentoo.org/705128
+https://bugs.gentoo.org/786228
+--- a/ntpd/ntp_sandbox.c
++++ b/ntpd/ntp_sandbox.c
+@@ -463,6 +463,15 @@ int scmp_sc[] = {
+ SCMP_SYS(send),
+ SCMP_SYS(stat64),
+ #endif
++#if defined(__arm__)
++ SCMP_SYS(statx),
++#endif
++#if defined(__riscv32__)
++ SCMP_SYS(faccessat),
++#endif
++#if defined(__aarch64__)
++ SCMP_SYS(syscall),
++#endif
+ };
+ {
+ for (unsigned int i = 0; i < COUNTOF(scmp_sc); i++) {
+--- a/ntpd/ntp_sandbox.c
++++ b/ntpd/ntp_sandbox.c
+@@ -355,6 +355,7 @@ int scmp_sc[] = {
+ SCMP_SYS(openat), /* SUSE */
+ #endif
+ SCMP_SYS(poll),
++ SCMP_SYS(pread64),
+ SCMP_SYS(pselect6),
+ SCMP_SYS(read),
+ SCMP_SYS(recvfrom), /* Comment this out for testing.