commit 0727dd09eca355e7539cbcb23b148fcee9b21513
author Darren Tucker <dtucker@dtucker.net> Fri Mar 12 15:58:57 2021 +1100
committer Darren Tucker <dtucker@dtucker.net> Fri Mar 12 16:03:51 2021 +1100
tree 1bd81f6368d0b2f630511e6627df56d1572be748
parent 51155e52e94dc1847e695765c80b0c8e768b880e

Allow (but return EACCES) fstatat64 in sandbox.

This is apparently used in some configurations of OpenSSL when glibc
has getrandom().  bz#3276, patch from Kris Karas, ok djm@

sandbox-seccomp-filter.c

diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
index d8dc712..7981c84 100644
--- a/sandbox-seccomp-filter.c
+++ b/sandbox-seccomp-filter.c
@@ -154,6 +154,9 @@
 #ifdef __NR_fstat64
 	SC_DENY(__NR_fstat64, EACCES),
 #endif
+#ifdef __NR_fstatat64
+	SC_DENY(__NR_fstatat64, EACCES),
+#endif
 #ifdef __NR_open
 	SC_DENY(__NR_open, EACCES),
 #endif