blob: c6c0f80a1973e871e3bf6ec096c7c12f3e9b9d0b [file] [log] [blame]
Brad Bishop316dfdd2018-06-25 12:45:53 -04001From 9c4826c19f04da533886209361a2caddf582d65c Mon Sep 17 00:00:00 2001
Patrick Williamsddad1a12017-02-23 20:36:32 -06002From: Mingli Yu <Mingli.Yu@windriver.com>
3Date: Tue, 6 Sep 2016 17:17:44 +0800
4Subject: [PATCH] vsftpd: allow sysinfo() in the seccomp sandbox
5
6Upstream-Status: Pending
7
8* Allow sysinfo() in the seccomp sandbox otherwise
9 comes below OOPS: priv_sock_get_cmd as the syscall
10 sysinfo() not allowed
11
12tnftp 192.168.1.1
13Connected to 192.168.1.1.
14220 (vsFTPd 3.0.3)
15Name (192.168.1.1:root): anonymous
16331 Please specify the password.
17Password:
18230 Login successful.
19Remote system type is UNIX.
20Using binary mode to transfer files.
21ftp> prompt
22Interactive mode off.
23ftp> mget small*
24OOPS: priv_sock_get_cmd
25
26Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Brad Bishop316dfdd2018-06-25 12:45:53 -040027
Patrick Williamsddad1a12017-02-23 20:36:32 -060028---
29 seccompsandbox.c | 1 +
30 1 file changed, 1 insertion(+)
31
32diff --git a/seccompsandbox.c b/seccompsandbox.c
33index 2c350a9..67d9ca5 100644
34--- a/seccompsandbox.c
35+++ b/seccompsandbox.c
36@@ -409,6 +409,7 @@ seccomp_sandbox_setup_postlogin(const struct vsf_session* p_sess)
37 allow_nr(__NR_getcwd);
38 allow_nr(__NR_chdir);
39 allow_nr(__NR_getdents);
40+ allow_nr(__NR_sysinfo);
41 /* Misc */
42 allow_nr(__NR_umask);
43