bind: add getpid() to the seccomp whitelist

This commit is contained in:
Duncaen 2017-02-11 22:16:08 +01:00
parent 30db88f831
commit 02beafcba8
2 changed files with 11 additions and 7 deletions

View file

@ -1,33 +1,37 @@
--- bin/named/include/named/seccomp.h.orig
+++ bin/named/include/named/seccomp.h
@@ -58,6 +58,7 @@
@@ -57,6 +57,8 @@
SCMP_SYS(rt_sigsuspend),
SCMP_SYS(fstat),
SCMP_SYS(epoll_ctl),
SCMP_SYS(gettimeofday),
+ SCMP_SYS(getpid),
+ SCMP_SYS(getrandom),
SCMP_SYS(gettimeofday),
SCMP_SYS(unlink),
SCMP_SYS(socket),
SCMP_SYS(sendto),
@@ -121,6 +122,7 @@
@@ -121,6 +123,8 @@
"fstat",
"epoll_ctl",
"gettimeofday",
+ "getpid",
+ "getrandom",
"unlink",
"socket",
"sendto",
@@ -190,6 +192,7 @@
@@ -190,6 +194,8 @@
SCMP_SYS(fstat64),
SCMP_SYS(epoll_ctl),
SCMP_SYS(gettimeofday),
+ SCMP_SYS(getpid),
+ SCMP_SYS(getrandom),
SCMP_SYS(unlink),
#ifndef ISC_PLATFORM_USETHREADS
SCMP_SYS(fcntl64),
@@ -226,6 +229,7 @@
@@ -226,6 +232,8 @@
"fstat64",
"epoll_ctl",
"gettimeofday",
+ "getpid",
+ "getrandom",
"unlink",
#ifndef ISC_PLATFORM_USETHREADS

View file

@ -3,7 +3,7 @@ pkgname=bind
_distver=9.10.4
_patchver=P6
version="${_distver}${_patchver}"
revision=1
revision=2
wrksrc="${pkgname}-${_distver}-${_patchver}"
short_desc="Berkeley Internet Name Domain server"
maintainer="Juan RP <xtraeme@voidlinux.eu>"