[Bug 3430] 64 bit time and seccomp conflict

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Tue Nov 4 09:19:06 AEDT 2025


https://bugzilla.mindrot.org/show_bug.cgi?id=3430

--- Comment #11 from Darren Tucker <dtucker at dtucker.net> ---
(In reply to Rustam Abdullaev from comment #10)
[...]
> Building with BR2_PACKAGE_OPENSSH_SANDBOX=n "fixes" the issue. So
> there's definitely something wrong with seccomp on a 32-bit ARM
> platform.

As I said in comment#7, one possible reason for this is if the headers
do not define __NR_clock_gettime64 at compile time. 
sandbox-seccomp-filter.c has this:

#ifdef __NR_clock_gettime64
        SC_ALLOW(__NR_clock_gettime64),
#endif

so if the headers don't define __NR_clock_gettime64 the sandbox won't
know to allow it.  This is independent of whether or not clock_gettime
works.  If you run ./configure --with-cflags=-D__NR_clock_gettime64=403
&& make and it works then that's likely the problem.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list