mirrors/openssh
0
0
Fork 0
mirror of git://anongit.mindrot.org/openssh.git synced 2024-11-23 18:23:25 +08:00
Code Issues Packages Projects Releases Wiki Activity

Allow nanosleep in preauth privsep child.

Browse Source 
The new timing attack mitigation code uses nanosleep in the preauth
codepath, allow in systrace andbox too.
This commit is contained in:
Darren Tucker 2018-04-13 16:23:57 +10:00
parent 0e73428038
commit 1c5b4bc827
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
sandbox-systrace.c
View File

@ -59,6 +59,7 @@ static const struct sandbox_policy preauth_policy[] = {
{ SYS_getpgid, SYSTR_POLICY_PERMIT },
{ SYS_clock_gettime, SYSTR_POLICY_PERMIT },
{ SYS_gettimeofday, SYSTR_POLICY_PERMIT },
{ SYS_nanosleep, SYSTR_POLICY_PERMIT },
{ SYS_sigprocmask, SYSTR_POLICY_PERMIT },
#ifdef SYS_getentropy