seccomp2: Add "shutdown" to the list of permitted system calls.
commit0e5378feeca5d67b7e8f5550eaf7fcd87b8f59ea
authorNick Mathewson <nickm@torproject.org>
Mon, 12 Nov 2018 13:23:58 +0000 (12 08:23 -0500)
committerNick Mathewson <nickm@torproject.org>
Mon, 12 Nov 2018 13:23:58 +0000 (12 08:23 -0500)
treec795f6f7997ff1e295b56f0ea1ba6235770ef379
parent46796623f995c5b63d5cfbda1a038d9f6158ec90
seccomp2: Add "shutdown" to the list of permitted system calls.

We don't use this syscall, but openssl apparently does.

(This syscall puts a socket into a half-closed state. Don't worry:
It doesn't shut down the system or anything.)

Fixes bug 28183; bugfix on 0.2.5.1-alpha where the sandbox was
introduced.
changes/bug28183 [new file with mode: 0644]
src/common/sandbox.c