| index : packages | |
| Archlinux32 package modifications | gitolite user |
| summaryrefslogtreecommitdiff |
| -rw-r--r-- | core/openssh/PKGBUILD | 11 | ||||
| -rw-r--r-- | core/openssh/openssh-8.4p1-sandbox-seccomp-pselect6_time64.patch | 13 |
diff --git a/core/openssh/PKGBUILD b/core/openssh/PKGBUILD index 15bba40a..d7a49aff 100644 --- a/core/openssh/PKGBUILD +++ b/core/openssh/PKGBUILD @@ -1,8 +1,11 @@ -# for now glibc 2.33 has been updated without libseccomp, so libseccomp -# sandbox fails the login session in sshd +# T2SDE patch for missing pselect6_time64 in seccomp, thanks :-) +source+=(openssh-8.4p1-sandbox-seccomp-pselect6_time64.patch) +sha256sums+=(db7c0acfbed11ce4c2dbc602e8d5dfb8d46428679e96b325f564932ac2d8e14e) + eval "$( - declare -f build | \ + declare -f prepare | \ sed ' - s,./configure,./configure --with-sandbox=rlimit,g + /patch.*001/ a \ + patch -p1 -i ../openssh-8.4p1-sandbox-seccomp-pselect6_time64.patch ' )" diff --git a/core/openssh/openssh-8.4p1-sandbox-seccomp-pselect6_time64.patch b/core/openssh/openssh-8.4p1-sandbox-seccomp-pselect6_time64.patch new file mode 100644 index 00000000..94776548 --- /dev/null +++ b/core/openssh/openssh-8.4p1-sandbox-seccomp-pselect6_time64.patch @@ -0,0 +1,13 @@ +diff -rauN openssh-8.4p1/sandbox-seccomp-filter.c openssh-8.4p1-sandbox-seccomp-pselect6_time64-patch/sandbox-seccomp-filter.c +--- openssh-8.4p1/sandbox-seccomp-filter.c 2020-09-27 09:25:01.000000000 +0200 ++++ openssh-8.4p1-sandbox-seccomp-pselect6_time64-patch/sandbox-seccomp-filter.c 2021-02-26 16:57:02.857964436 +0100 +@@ -267,6 +267,9 @@ + #ifdef __NR_pselect6 + SC_ALLOW(__NR_pselect6), + #endif ++#ifdef __NR_pselect6_time64 ++ SC_ALLOW(__NR_pselect6_time64), ++#endif + #ifdef __NR_read + SC_ALLOW(__NR_read), + #endif |