commit 7e929163ed40f9ce90060a3ca6df558c3d901379 Author: Jakub Jelen Date: Wed Nov 13 12:57:05 2019 +0100 seccomp: Allow clock_nanosleep() to make OpenSSH working with latest glibc diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c index b5cda70b..be239767 100644 --- a/sandbox-seccomp-filter.c +++ b/sandbox-seccomp-filter.c @@ -242,6 +242,9 @@ static const struct sock_filter preauth_insns[] = { #ifdef __NR_nanosleep SC_ALLOW(__NR_nanosleep), #endif +#ifdef __NR_clock_nanosleep + SC_ALLOW(__NR_clock_nanosleep), +#endif #ifdef __NR__newselect SC_ALLOW(__NR__newselect), #endif commit 500c30eaf88f26e4a74b06717fe04afec7a7516f Author: Jakub Jelen Date: Wed Nov 27 11:06:55 2019 +0100 sandbox-seccomp: Allow clock_nanosleep on ARM diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c index be239767..3ef30c9d 100644 --- a/sandbox-seccomp-filter.c +++ b/sandbox-seccomp-filter.c @@ -245,6 +245,12 @@ static const struct sock_filter preauth_insns[] = { #ifdef __NR_clock_nanosleep SC_ALLOW(__NR_clock_nanosleep), #endif +#ifdef __NR_clock_nanosleep_time64 + SC_ALLOW(__NR_clock_nanosleep_time64), +#endif +#ifdef __NR_clock_gettime64 + SC_ALLOW(__NR_clock_gettime64), +#endif #ifdef __NR__newselect SC_ALLOW(__NR__newselect), #endif