aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMike Frysinger <vapier@gentoo.org>2015-10-26 00:22:28 -0400
committerMike Frysinger <vapier@gentoo.org>2015-10-26 00:22:28 -0400
commit353a328d1dc503bb2952f6c37b0fe6ad47fc5478 (patch)
tree2a38de7588e75313469ac92844b783231d8937fb
parentporting: fix android builds (diff)
downloadpax-utils-353a328d1dc503bb2952f6c37b0fe6ad47fc5478.tar.gz
pax-utils-353a328d1dc503bb2952f6c37b0fe6ad47fc5478.tar.bz2
pax-utils-353a328d1dc503bb2952f6c37b0fe6ad47fc5478.zip
security: whitelist the getcwd syscallv1.1.4
This might be run by the sandbox. Reported-by: Markus Oehme <oehme.markus@gmx.de> URL: https://bugs.gentoo.org/562206
-rw-r--r--security.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/security.c b/security.c
index 8776a80..ba74bee 100644
--- a/security.c
+++ b/security.c
@@ -131,6 +131,7 @@ static void pax_seccomp_init(bool allow_forking)
/* Syscalls listed because of sandbox. */
SCMP_SYS(readlink),
+ SCMP_SYS(getcwd),
/* Syscalls listed because of fakeroot. */
SCMP_SYS(msgget),