blob: 82c0e1b68bb5dbf2fc3dc43cbe7333ef45328595 [file] [log] [blame]
Andrew Geissler87f5cff2022-09-30 13:13:31 -05001From 28b9f115e36e2133301b02fa02ad71a8efbed9b9 Mon Sep 17 00:00:00 2001
Brad Bishop1a4b7ee2018-12-16 17:11:34 -08002From: Joe Slater <jslater@windriver.com>
3Date: Thu, 9 Mar 2017 10:58:06 -0800
Brad Bishop26bdd442019-08-16 17:08:17 -04004Subject: [PATCH] chrony: fix build failure for arma9
Brad Bishop316dfdd2018-06-25 12:45:53 -04005
Andrew Geissler6aa7eec2023-03-03 12:41:14 -06006Eliminate references to syscalls not available
7for ARM_EABI. Also add a dependency on libseccomp
8which is needed for scfilter to work.
Brad Bishop316dfdd2018-06-25 12:45:53 -04009
Andrew Geissler6aa7eec2023-03-03 12:41:14 -060010Set PACKAGECONFIG to not enable scfilter, since
11kernel CONFIG_SECCOMP is unlikely to be set. This
12aligns the usage of libseccomp with that of other packages.
Brad Bishop7f28bc52017-12-03 23:42:40 -050013
Andrew Geissler6aa7eec2023-03-03 12:41:14 -060014Upstream-Status: Pending
Brad Bishop316dfdd2018-06-25 12:45:53 -040015
Andrew Geissler6aa7eec2023-03-03 12:41:14 -060016Signed-off-by: Joe Slater <jslater@windriver.com>
Brad Bishop7f28bc52017-12-03 23:42:40 -050017
Andrew Geissler6aa7eec2023-03-03 12:41:14 -060018Refresh patch for new upstream version.
Brad Bishop316dfdd2018-06-25 12:45:53 -040019
Andrew Geissler6aa7eec2023-03-03 12:41:14 -060020Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Andrew Geissler4b7c1152020-11-30 19:55:29 -060021
Andrew Geissler6aa7eec2023-03-03 12:41:14 -060022Refreshed for 4.0
Andrew Geissler4b7c1152020-11-30 19:55:29 -060023
Andrew Geissler6aa7eec2023-03-03 12:41:14 -060024Signed-off-by: Khem Raj <raj.khem@gmail.com>
Andrew Geissler87f5cff2022-09-30 13:13:31 -050025
Brad Bishop1a4b7ee2018-12-16 17:11:34 -080026---
Andrew Geissler595f6302022-01-24 19:11:47 +000027 sys_linux.c | 15 +++++++++------
28 1 file changed, 9 insertions(+), 6 deletions(-)
Brad Bishop1a4b7ee2018-12-16 17:11:34 -080029
Andrew Geissler595f6302022-01-24 19:11:47 +000030diff --git a/sys_linux.c b/sys_linux.c
Andrew Geissler87f5cff2022-09-30 13:13:31 -050031index f2baab1..14a9241 100644
Brad Bishop7f28bc52017-12-03 23:42:40 -050032--- a/sys_linux.c
33+++ b/sys_linux.c
Andrew Geissler595f6302022-01-24 19:11:47 +000034@@ -484,7 +484,6 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
Andrew Geissler4b7c1152020-11-30 19:55:29 -060035 #endif
36 SCMP_SYS(gettimeofday),
37 SCMP_SYS(settimeofday),
38- SCMP_SYS(time),
Andrew Geissler595f6302022-01-24 19:11:47 +000039
Brad Bishop7f28bc52017-12-03 23:42:40 -050040 /* Process */
Andrew Geissler4b7c1152020-11-30 19:55:29 -060041 SCMP_SYS(clone),
Andrew Geissler595f6302022-01-24 19:11:47 +000042@@ -494,7 +493,6 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
Andrew Geissler4b7c1152020-11-30 19:55:29 -060043 SCMP_SYS(exit),
44 SCMP_SYS(exit_group),
45 SCMP_SYS(getpid),
46- SCMP_SYS(getrlimit),
47 SCMP_SYS(getuid),
William A. Kennington IIIb95905d2021-06-02 12:40:56 -070048 SCMP_SYS(getuid32),
Andrew Geissler87f5cff2022-09-30 13:13:31 -050049 #ifdef __NR_rseq
50@@ -511,7 +509,6 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
Brad Bishop7f28bc52017-12-03 23:42:40 -050051 /* Memory */
Andrew Geissler4b7c1152020-11-30 19:55:29 -060052 SCMP_SYS(brk),
53 SCMP_SYS(madvise),
54- SCMP_SYS(mmap),
55 SCMP_SYS(mmap2),
56 SCMP_SYS(mprotect),
57 SCMP_SYS(mremap),
Andrew Geissler87f5cff2022-09-30 13:13:31 -050058@@ -571,8 +568,6 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
Andrew Geissler4b7c1152020-11-30 19:55:29 -060059 SCMP_SYS(sendmsg),
60 SCMP_SYS(sendto),
61 SCMP_SYS(shutdown),
Brad Bishop7f28bc52017-12-03 23:42:40 -050062- /* TODO: check socketcall arguments */
63- SCMP_SYS(socketcall),
Andrew Geissler595f6302022-01-24 19:11:47 +000064
Brad Bishop7f28bc52017-12-03 23:42:40 -050065 /* General I/O */
Andrew Geissler4b7c1152020-11-30 19:55:29 -060066 SCMP_SYS(_newselect),
Andrew Geissler87f5cff2022-09-30 13:13:31 -050067@@ -596,7 +591,6 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
Andrew Geissler4b7c1152020-11-30 19:55:29 -060068 #ifdef __NR_futex_time64
69 SCMP_SYS(futex_time64),
70 #endif
71- SCMP_SYS(select),
72 SCMP_SYS(set_robust_list),
73 SCMP_SYS(write),
Andrew Geissler595f6302022-01-24 19:11:47 +000074
Andrew Geissler87f5cff2022-09-30 13:13:31 -050075@@ -604,6 +598,15 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
Andrew Geissler4b7c1152020-11-30 19:55:29 -060076 SCMP_SYS(getrandom),
77 SCMP_SYS(sysinfo),
78 SCMP_SYS(uname),
Andrew Geissler595f6302022-01-24 19:11:47 +000079+ /* not always available */
Brad Bishop7f28bc52017-12-03 23:42:40 -050080+#if ! defined(__ARM_EABI__)
81+ SCMP_SYS(time),
82+ SCMP_SYS(getrlimit),
83+ SCMP_SYS(select),
84+ SCMP_SYS(mmap),
85+ /* TODO: check socketcall arguments */
86+ SCMP_SYS(socketcall),
87+#endif
88 };
Andrew Geissler595f6302022-01-24 19:11:47 +000089
William A. Kennington IIIb95905d2021-06-02 12:40:56 -070090 const int denied_any[] = {