Changeset 79eec369

Timestamp:

03/02/2021 04:40:31 PM (4 years ago)

Author:

Thomas Trepl <thomas@…>

Branches:

11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 12.2, gimp3, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/for-12.3, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/spidermonkey128, xry111/test-20220226, xry111/xf86-video-removal

Children:

7b66ed2

Parents:

bd0dcd5

Message:

Fix a seccomp issue in OpenSSH

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@24325 af4574ff-66df-0310-9fd7-8a98e5e911e0

Files:

• introduction/welcome/changelog.xml (modified) (1 diff)
• postlfs/security/openssh.xml (modified) (1 diff)

introduction/welcome/changelog.xml

@@ -46 +46 @@
       <itemizedlist>
         <listitem>
+          <para>[thomas] - Fix a seccomp issue in OpenSSH on non-x86_64 platforms.</para>
+        </listitem>
+        <listitem>
           <para>[ken] - Update to nss-3.62. Fixes
           <ulink url="&blfs-ticket-root;14684">#14684</ulink>.</para>

postlfs/security/openssh.xml

@@ -151 +151 @@
 
 <screen><userinput remap="pre">sed -e '/INSTALLKEYS_SH/s/)//' -e '260a\  )' -i contrib/ssh-copy-id</userinput></screen>
+
+    <para>
+      Next, fix an issue on platforms other than x86_64:
+    </para>
+    <screen><userinput remap="pre">if [ "$(uname -m)" != "x86_64" ]; then
+    l1="#ifdef __NR_pselect6_time64"
+    l2="    SC_ALLOW(__NR_pselect6_time64),"
+    l3="#endif"
+    sed -e "/^#ifdef __NR_read$/ i $l1\n$l2\n$l3" \
+        -i sandbox-seccomp-filter.c
+fi</userinput></screen>
 
     <para>