diff options
| author | Daniel Golle <daniel@makrotopia.org> | 2021-04-10 17:30:49 +0100 |
|---|---|---|
| committer | Daniel Golle <daniel@makrotopia.org> | 2021-04-10 17:36:03 +0100 |
| commit | 00a85a163405fdf9bee4d8c3f0ee87ca9ed259d6 (patch) | |
| tree | ab2d58a470135766a6f4225ab8a2ca5acd24d794 /package/network | |
| parent | 734c3f71482d5234f320f9b2b9acd8c51be51ae6 (diff) | |
| download | upstream-00a85a163405fdf9bee4d8c3f0ee87ca9ed259d6.tar.gz upstream-00a85a163405fdf9bee4d8c3f0ee87ca9ed259d6.tar.bz2 upstream-00a85a163405fdf9bee4d8c3f0ee87ca9ed259d6.zip | |
umdns: add missing syscalls to seccomp filter
Looks like 'openat', 'pipe2' and 'ppoll' are now needed, possibly due
to changes on libraries used by umdns now using slightly different
calls.
Found using
/etc/init.d/umdns trace
now use umdns, ie. cover all ubus call etc., then
/etc/init.d/umdns stop
find list of syscalls traced in /tmp/umdns.*.json
Fixes: FS#3355 ("UMDNS: does not start on master with seccomp")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Diffstat (limited to 'package/network')
| -rw-r--r-- | package/network/services/umdns/files/umdns.json | 57 |
1 files changed, 30 insertions, 27 deletions
diff --git a/package/network/services/umdns/files/umdns.json b/package/network/services/umdns/files/umdns.json index 4d5ed886d0..5533b7c512 100644 --- a/package/network/services/umdns/files/umdns.json +++ b/package/network/services/umdns/files/umdns.json @@ -3,41 +3,44 @@ "syscalls": [ { "names": [ - "read", - "write", - "writev", - "open", - "close", - "time", - "brk", - "ioctl", - "uname", "bind", + "brk", + "clock_gettime", + "close", "connect", - "getsockname", - "recvmsg", - "recvfrom", - "sendmsg", - "sendto", - "setsockopt", - "socket", - "pipe", - "poll", - "fcntl64", - "fstat", "epoll_create", "epoll_create1", "epoll_ctl", - "epoll_wait", "epoll_pwait", - "rt_sigaction", - "sigreturn", - "rt_sigreturn", - "rt_sigprocmask", - "exit_group", + "epoll_wait", "exit", + "exit_group", "fcntl", - "clock_gettime" + "fcntl64", + "fstat", + "getsockname", + "ioctl", + "open", + "openat", + "pipe", + "pipe2", + "poll", + "ppoll", + "read", + "recvfrom", + "recvmsg", + "rt_sigaction", + "rt_sigprocmask", + "rt_sigreturn", + "sendmsg", + "sendto", + "setsockopt", + "sigreturn", + "socket", + "time", + "uname", + "write", + "writev" ], "action": "SCMP_ACT_ALLOW" } |