mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2024-12-06 19:41:15 +01:00
Fix sandbox crash during reload of logging configuration
Allow calls to dup() which was introduced in commit a22fbab986.
From a security perspective, I don't think this should impact the
security of the sandbox significantly. As far as I can tell, there
is nothing an adversary can do with a duplicated FD that can't be
done with the original.
This commit is contained in:
committed by
Peter Gerber
parent
7237637871
commit
b9d81282e0
@@ -0,0 +1,4 @@
|
||||
o Minor bugfixes (linux seccomp sandbox):
|
||||
- Fix crash when reloading logging configuration while the
|
||||
experimental sandbox is enabled. Fixes bug 29150; bugfix
|
||||
on 0.4.1.7. Patch by Peter Gerber.
|
||||
@@ -143,6 +143,7 @@ static int filter_nopar_gen[] = {
|
||||
SCMP_SYS(clock_gettime),
|
||||
SCMP_SYS(close),
|
||||
SCMP_SYS(clone),
|
||||
SCMP_SYS(dup),
|
||||
SCMP_SYS(epoll_create),
|
||||
SCMP_SYS(epoll_wait),
|
||||
#ifdef __NR_epoll_pwait
|
||||
|
||||
Reference in New Issue
Block a user