RepoMirrors
/
openssh
mirror of git://anongit.mindrot.org/openssh.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Allow nanosleep in preauth privsep child. 

The new timing attack mitigation code uses nanosleep in the preauth
codepath, allow in sandbox.
This commit is contained in:
Darren Tucker 2018-04-13 16:06:29 +10:00
parent e9d910b028
commit 0e73428038
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
sandbox-seccomp-filter.c
View File

@ -193,6 +193,9 @@ static const struct sock_filter preauth_insns[] = {
#ifdef __NR_munmap
SC_ALLOW(__NR_munmap),
#endif
#ifdef __NR_nanosleep
SC_ALLOW(__NR_nanosleep),
#endif
#ifdef __NR__newselect
SC_ALLOW(__NR__newselect),
#endif