sys-apps/file/files/file-5.39-portage-sandbox.patch


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

From 81765a2d4fcce23f42495d5ec03bbfecb2a3c381 Mon Sep 17 00:00:00 2001
From: tka <tka@kamph.org>
Date: Wed, 24 Jun 2020 11:18:45 +0200
Subject: [PATCH] Allow getcwd for Gentoo's portage sandbox

Bug: https://bugs.gentoo.org/728978
---
 src/seccomp.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/seccomp.c b/src/seccomp.c
index db9364ae..7f5d6f26 100644
--- a/src/seccomp.c
+++ b/src/seccomp.c
@@ -229,6 +229,8 @@ enable_sandbox_full(void)
 	ALLOW_RULE(write);
 	ALLOW_RULE(writev);
 
+	// needed by Gentoo's portage sandbox
+	ALLOW_RULE(getcwd);
 
 #if 0
 	// needed by valgrind
-- 
2.28.0