Attachment 866047 Details for Bug 1026314 – 01-bz1026314-3.patch

[patch] 01-bz1026314-3.patch

01-bz1026314.patch (text/plain), 984 bytes, created by Paul Moore on 2014-02-21 14:48:13 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Paul Moore

Created: 2014-02-21 14:48:13 UTC

Size: 984 bytes

patch

obsolete

>seccomp: add mlock() and munlock() to the syscall whitelist
>
>From: Paul Moore <pmoore@redhat.com>
>
>It appears that on some systems PulseAudio also requires the mlock()
>syscall, we also add munlock() for the obvious reasons.  On systems
>that end up using mlock(), the problem can be seen with the following
>command line:
>
>  # qemu -monitor stdio  -sandbox on \
>         -device intel-hda -device hda-duplex
>
>Signed-off-by: Paul Moore <pmoore@redhat.com>
>---
> qemu-seccomp.c |    4 +++-
> 1 file changed, 3 insertions(+), 1 deletion(-)
>
>diff --git a/qemu-seccomp.c b/qemu-seccomp.c
>index 3a2fbed..418dc4e 100644
>--- a/qemu-seccomp.c
>+++ b/qemu-seccomp.c
>@@ -242,7 +242,9 @@ static const struct QemuSeccompSyscall seccomp_whitelist[] = {
>     { SCMP_SYS(fchmod), 240 },
>     { SCMP_SYS(shmget), 240 },
>     { SCMP_SYS(shmat), 240 },
>-    { SCMP_SYS(shmdt), 240 }
>+    { SCMP_SYS(shmdt), 240 },
>+    { SCMP_SYS(mlock), 240 },
>+    { SCMP_SYS(munlock), 240 }
> };
> 
> int seccomp_start(void)

Actions: View | Diff

Attachments on bug 1026314: 819116 | 819123 | 826740 | 841711 | 844876 | 865825 | 865827 | 866047 | 867241 | 867242 | 867844 | 867845 | 926521