[Git][NTPsec/ntpsec][master] Fix 2 SigSYS throws from seccomp

[Gary E. Miller (@garyedmundsmiller)]

Gary E. Miller pushed to branch master at NTPsec / ntpsec


Commits:
9e1dff14 by James Browning at 2025-10-27T15:48:50-07:00
Fix 2 SigSYS throws from seccomp

clock_nanosleep trigggerd breakage on AMD64.
readlinkat triggered on AMD64 w/ MDNS.

- - - - -


1 changed file:

- ntpd/ntp_sandbox.c


Changes:

=====================================
ntpd/ntp_sandbox.c
=====================================
@@ -482,6 +482,7 @@ int scmp_sc[] = {
 	SCMP_SYS(clock_getres_time64),
 #endif  // __i386__
 #if defined(HAVE_DNS_SD_H)
+	SCMP_SYS(readlink),
 	#if defined(__aarch64__) || defined(__amd64__)
 		SCMP_SYS(readlinkat),
 		SCMP_SYS(pipe2),
@@ -489,12 +490,12 @@ int scmp_sc[] = {
 		SCMP_SYS(getresgid),
 	#endif // __amd64__ or __aarch64__
 	#if defined(__i386__)
-		SCMP_SYS(readlink),
 		SCMP_SYS(pipe2),
 		SCMP_SYS(getresuid32),
 		SCMP_SYS(getresgid32),
 	#endif // __i386__
 #endif // HAVE_DNS_SD_H
+	SCMP_SYS(clock_nanosleep),
 };
 	{
 		for (unsigned int i = 0; i < COUNTOF(scmp_sc); i++) {



View it on GitLab: https://gitlab.com/NTPsec/ntpsec/-/commit/9e1dff14b034f09e8f58b30c586dd92446bf5344

-- 
View it on GitLab: https://gitlab.com/NTPsec/ntpsec/-/commit/9e1dff14b034f09e8f58b30c586dd92446bf5344
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ntpsec.org/pipermail/vc/attachments/20251027/97ed0de4/attachment-0001.htm>