mirror of https://github.com/omar-polo/gmid.git
Allow Arch-Armv7 syscalls in sandbox.c
This commit is contained in:
parent
c6ae2561a0
commit
d0e0be1e43
|
@ -344,6 +344,9 @@ static struct sock_filter filter[] = {
|
||||||
#ifdef __NR_newfstatat
|
#ifdef __NR_newfstatat
|
||||||
SC_ALLOW(newfstatat),
|
SC_ALLOW(newfstatat),
|
||||||
#endif
|
#endif
|
||||||
|
#ifdef __NR_fstatat64
|
||||||
|
SC_ALLOW(fstatat64),
|
||||||
|
#endif
|
||||||
#ifdef __NR_oldfstat
|
#ifdef __NR_oldfstat
|
||||||
SC_ALLOW(oldfstat),
|
SC_ALLOW(oldfstat),
|
||||||
#endif
|
#endif
|
||||||
|
@ -383,6 +386,12 @@ static struct sock_filter filter[] = {
|
||||||
#ifdef __NR_writev
|
#ifdef __NR_writev
|
||||||
SC_ALLOW(writev),
|
SC_ALLOW(writev),
|
||||||
#endif
|
#endif
|
||||||
|
#ifdef __NR__llseek
|
||||||
|
SC_ALLOW(_llseek),
|
||||||
|
#endif
|
||||||
|
#ifdef __NR_sigreturn
|
||||||
|
SC_ALLOW(sigreturn),
|
||||||
|
#endif
|
||||||
|
|
||||||
/* disallow everything else */
|
/* disallow everything else */
|
||||||
BPF_STMT(BPF_RET | BPF_K, SC_FAIL),
|
BPF_STMT(BPF_RET | BPF_K, SC_FAIL),
|
||||||
|
|
Loading…
Reference in New Issue