summaryrefslogtreecommitdiffstats
path: root/usr.bin/ssh/sandbox-systrace.c
diff options
context:
space:
mode:
authordjm <djm@openbsd.org>2014-01-30 22:26:14 +0000
committerdjm <djm@openbsd.org>2014-01-30 22:26:14 +0000
commit6393c7eb6ec4e166880d02cb39ae2c821af3b77f (patch)
treee93d2bf762a069520551e6e4d668ebfbccbd5aab /usr.bin/ssh/sandbox-systrace.c
parentSimplyfy adjtime(2) by keeping track of the adjustment as a number of (diff)
downloadwireguard-openbsd-6393c7eb6ec4e166880d02cb39ae2c821af3b77f.tar.xz
wireguard-openbsd-6393c7eb6ec4e166880d02cb39ae2c821af3b77f.zip
allow shutdown(2) syscall in sandbox - it may be called by packet_close()
from portable
Diffstat (limited to 'usr.bin/ssh/sandbox-systrace.c')
-rw-r--r--usr.bin/ssh/sandbox-systrace.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/usr.bin/ssh/sandbox-systrace.c b/usr.bin/ssh/sandbox-systrace.c
index 6259ed50f51..88089dedc11 100644
--- a/usr.bin/ssh/sandbox-systrace.c
+++ b/usr.bin/ssh/sandbox-systrace.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: sandbox-systrace.c,v 1.7 2013/06/01 13:15:52 dtucker Exp $ */
+/* $OpenBSD: sandbox-systrace.c,v 1.8 2014/01/30 22:26:14 djm Exp $ */
/*
* Copyright (c) 2011 Damien Miller <djm@mindrot.org>
*
@@ -62,6 +62,7 @@ static const struct sandbox_policy preauth_policy[] = {
{ SYS_munmap, SYSTR_POLICY_PERMIT },
{ SYS_read, SYSTR_POLICY_PERMIT },
{ SYS_select, SYSTR_POLICY_PERMIT },
+ { SYS_shutdown, SYSTR_POLICY_PERMIT },
{ SYS_sigprocmask, SYSTR_POLICY_PERMIT },
{ SYS_write, SYSTR_POLICY_PERMIT },
{ -1, -1 }