aboutsummaryrefslogtreecommitdiffstats
path: root/package
diff options
context:
space:
mode:
authorDaniel Golle <daniel@makrotopia.org>2021-04-10 17:30:49 +0100
committerDaniel Golle <daniel@makrotopia.org>2021-04-10 17:36:03 +0100
commit00a85a163405fdf9bee4d8c3f0ee87ca9ed259d6 (patch)
treeab2d58a470135766a6f4225ab8a2ca5acd24d794 /package
parent734c3f71482d5234f320f9b2b9acd8c51be51ae6 (diff)
downloadupstream-00a85a163405fdf9bee4d8c3f0ee87ca9ed259d6.tar.gz
upstream-00a85a163405fdf9bee4d8c3f0ee87ca9ed259d6.tar.bz2
upstream-00a85a163405fdf9bee4d8c3f0ee87ca9ed259d6.zip
umdns: add missing syscalls to seccomp filter
Looks like 'openat', 'pipe2' and 'ppoll' are now needed, possibly due to changes on libraries used by umdns now using slightly different calls. Found using /etc/init.d/umdns trace now use umdns, ie. cover all ubus call etc., then /etc/init.d/umdns stop find list of syscalls traced in /tmp/umdns.*.json Fixes: FS#3355 ("UMDNS: does not start on master with seccomp") Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Diffstat (limited to 'package')
-rw-r--r--package/network/services/umdns/files/umdns.json57
1 files changed, 30 insertions, 27 deletions
diff --git a/package/network/services/umdns/files/umdns.json b/package/network/services/umdns/files/umdns.json
index 4d5ed886d0..5533b7c512 100644
--- a/package/network/services/umdns/files/umdns.json
+++ b/package/network/services/umdns/files/umdns.json
@@ -3,41 +3,44 @@
"syscalls": [
{
"names": [
- "read",
- "write",
- "writev",
- "open",
- "close",
- "time",
- "brk",
- "ioctl",
- "uname",
"bind",
+ "brk",
+ "clock_gettime",
+ "close",
"connect",
- "getsockname",
- "recvmsg",
- "recvfrom",
- "sendmsg",
- "sendto",
- "setsockopt",
- "socket",
- "pipe",
- "poll",
- "fcntl64",
- "fstat",
"epoll_create",
"epoll_create1",
"epoll_ctl",
- "epoll_wait",
"epoll_pwait",
- "rt_sigaction",
- "sigreturn",
- "rt_sigreturn",
- "rt_sigprocmask",
- "exit_group",
+ "epoll_wait",
"exit",
+ "exit_group",
"fcntl",
- "clock_gettime"
+ "fcntl64",
+ "fstat",
+ "getsockname",
+ "ioctl",
+ "open",
+ "openat",
+ "pipe",
+ "pipe2",
+ "poll",
+ "ppoll",
+ "read",
+ "recvfrom",
+ "recvmsg",
+ "rt_sigaction",
+ "rt_sigprocmask",
+ "rt_sigreturn",
+ "sendmsg",
+ "sendto",
+ "setsockopt",
+ "sigreturn",
+ "socket",
+ "time",
+ "uname",
+ "write",
+ "writev"
],
"action": "SCMP_ACT_ALLOW"
}