mirror of
https://github.com/openwrt/openwrt.git
synced 2024-12-28 17:48:58 +00:00
00a85a1634
Looks like 'openat', 'pipe2' and 'ppoll' are now needed, possibly due
to changes on libraries used by umdns now using slightly different
calls.
Found using
/etc/init.d/umdns trace
now use umdns, ie. cover all ubus call etc., then
/etc/init.d/umdns stop
find list of syscalls traced in /tmp/umdns.*.json
Fixes: FS#3355 ("UMDNS: does not start on master with seccomp")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
49 lines
703 B
JSON
49 lines
703 B
JSON
{
|
|
"defaultAction": "SCMP_ACT_KILL_PROCESS",
|
|
"syscalls": [
|
|
{
|
|
"names": [
|
|
"bind",
|
|
"brk",
|
|
"clock_gettime",
|
|
"close",
|
|
"connect",
|
|
"epoll_create",
|
|
"epoll_create1",
|
|
"epoll_ctl",
|
|
"epoll_pwait",
|
|
"epoll_wait",
|
|
"exit",
|
|
"exit_group",
|
|
"fcntl",
|
|
"fcntl64",
|
|
"fstat",
|
|
"getsockname",
|
|
"ioctl",
|
|
"open",
|
|
"openat",
|
|
"pipe",
|
|
"pipe2",
|
|
"poll",
|
|
"ppoll",
|
|
"read",
|
|
"recvfrom",
|
|
"recvmsg",
|
|
"rt_sigaction",
|
|
"rt_sigprocmask",
|
|
"rt_sigreturn",
|
|
"sendmsg",
|
|
"sendto",
|
|
"setsockopt",
|
|
"sigreturn",
|
|
"socket",
|
|
"time",
|
|
"uname",
|
|
"write",
|
|
"writev"
|
|
],
|
|
"action": "SCMP_ACT_ALLOW"
|
|
}
|
|
]
|
|
}
|