Fix seccomp filter for ix68 (#1194401), fix previous commit

This commit is contained in:
Jakub Jelen 2015-02-23 11:51:23 +01:00
parent b9846a816d
commit d5a8001387
2 changed files with 3 additions and 4 deletions

View File

@ -2377,12 +2377,13 @@ index 4554b09..226a494 100644
diff -U3 openssh-6.6p1/sandbox-seccomp-filter.c openssh-6.6p1.seccomp/sandbox-seccomp-filter.c
--- openssh-6.6p1/sandbox-seccomp-filter.c 2014-02-06 01:17:50.000000000 +0100
+++ openssh-6.6p1.seccomp/sandbox-seccomp-filter.c 2015-02-11 09:07:10.885000000 +0100
@@ -95,6 +95,9 @@
@@ -95,6 +95,10 @@
#ifdef __NR_time /* not defined on EABI ARM */
SC_ALLOW(time),
#endif
+#ifdef SSH_AUDIT_EVENTS
+ SC_ALLOW(getuid),
+ SC_ALLOW(getuid32),
+#endif
SC_ALLOW(read),
SC_ALLOW(write),

View File

@ -510,11 +510,9 @@ fi
%if %{WITH_SELINUX}
--with-selinux --with-audit=linux \
%ifarch %{ix86} x86_64 %{arm}
# seccomp_filter cannot be build right now on aarch64/ppc64*/s390*
# being tracked in RHBZ 1195065
--with-sandbox=seccomp_filter \
%else
--with-sandbox=rlimit \
--with-sandbox=rlimit \
%endif
%endif
%if %{kerberos5}