openssh bugs - Nov 2019 - [Bug 3100] New: Update seccomp filter on ARM to match current glibc

https://bugzilla.mindrot.org/show_bug.cgi?id=3100

            Bug ID: 3100
           Summary: Update seccomp filter on ARM to match current glibc
           Product: Portable OpenSSH
           Version: 8.1p1
          Hardware: ARM
                OS: Linux
            Status: NEW
          Keywords: patch
          Severity: enhancement
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: jjelen at redhat.com

Created attachment 3340
  --> https://bugzilla.mindrot.org/attachment.cgi?id=3340&action=edit
sandbox-seccomp: Allow clock_nanosleep on ARM

As a follow-up on #3093 the ARM architecture is using a bit different
syscall clock_nanosleep_time64() for the same purpose, which makes the
previous fix incomplete.

The attached patch adds the arm alternative to the whitelist. My
searches around did not show any other syscall that could be used on
other architectures at this moment.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3100

--- Comment #1 from Jakub Jelen <jjelen at redhat.com> ---
For more information, see the following Fedora bug:

https://bugzilla.redhat.com/show_bug.cgi?id=1777054

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3100

Darren Tucker <dtucker at dtucker.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at dtucker.net
         Resolution|---                         |FIXED
             Status|NEW                         |RESOLVED
             Blocks|                            |3079

--- Comment #2 from Darren Tucker <dtucker at dtucker.net> ---
Applied, thanks.


Referenced Bugs:

https://bugzilla.mindrot.org/show_bug.cgi?id=3079
[Bug 3079] Tracking bug for 8.2 release
-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=3100

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #3 from Damien Miller <djm at mindrot.org> ---
closing resolved bugs as of 8.6p1 release

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.