[openssh-commits] [openssh] branch V_8_1 updated (a991cc5e -> fbe37c90)

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

dtucker pushed a change to branch V_8_1
in repository openssh.

      from  a991cc5e  seccomp: Allow clock_gettime64() in sandbox.
       new  fbe37c90  Deny (non-fatal) ipc in preauth privsep child.

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Detailed log of new commits:

commit fbe37c90602fa2d0d7b5f05868d6886b1e216e65
Author: Jeremy Drake <github at jdrake.com>
Date:   Fri Oct 11 18:31:05 2019 -0700

    Deny (non-fatal) ipc in preauth privsep child.
    
    As noted in openssh/openssh-portable#149, i386 does not have have
    _NR_shmget etc.  Instead, it has a single ipc syscall (see man 2 ipc,
    https://linux.die.net/man/2/ipc).  Add this syscall, if present, to the
    list of syscalls that seccomp will deny non-fatally.

Summary of changes:
 sandbox-seccomp-filter.c | 3 +++
 1 file changed, 3 insertions(+)

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.