Correct how we use libseccomp

This fixes a startup crash with libseccomp v2.4.0 if Sandbox is
set to 1.
This commit is contained in:
Peter Gerber
2019-06-10 14:56:31 +02:00
committed by Nick Mathewson
parent 1cd20ff848
commit 0d64bafcfe
2 changed files with 10 additions and 38 deletions
+8
View File
@@ -0,0 +1,8 @@
o Minor bugfixes (linux seccomp sandbox):
- Correct how we use libseccomp. Particularly, stop assuming that
rules are applied in a particular order or that more rules are
processed after the first match. Neither is the case! In libseccomp
<2.4.0 this lead to some rules having no effect. Libseccomp 2.4.0
changed how rules are generated leading to a different ordering
which in turn lead to a fatal crash during startup. Fixes bug
29819; bugfix on 0.2.5.1-alpha. Patch by Peter Gerber.