torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Revert "Change the sandbox behavior on all failed opens() to EACCES"

Browse Source 
This reverts commit 9a06282546.

It appears that I misunderstood how the seccomp2 filter rules
interact.  It appears that `SCMP_ACT_ERRNO()` always takes
precedence over `SCMP_ACT_ALLOW()` -- I had thought instead that
earlier rules would override later ones.  But this change caused bug
25115 (not in any released Tor).
This commit is contained in:
Nick Mathewson
2018-02-01 08:39:38 -05:00
parent 88b146cda5
commit ea8e9f17f5
2 changed files with 6 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/bug16106
-6
View File
@@ -1,6 +0,0 @@
o Minor bugfixes (linux seccomp2 sandbox):
- Cause a wider variety of unpermitted open() calls to fail with the
EACCES error when the sandbox is running. This won't enable any
previously non-working functionality, but it should turn several cases
from crashes into sandbox warnings. Fixes bug 16106; bugfix on
0.2.5.1-alpha.