From 20b8c97b15aeb7990fdd0144b2e90734eee2c0ef Mon Sep 17 00:00:00 2001 From: Thomas Habets Date: Wed, 8 May 2024 16:05:09 +0100 Subject: [PATCH] Allow clock_gettime64 in seccomp, if present From discussion in #54 --- configure.ac | 1 + src/arping.c | 3 +++ 2 files changed, 4 insertions(+) diff --git a/configure.ac b/configure.ac index de77cf0..57bf7a2 100644 --- a/configure.ac +++ b/configure.ac @@ -213,6 +213,7 @@ seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS($1), 0); CHECK_SECCOMP_SYSCALL([fstat]); CHECK_SECCOMP_SYSCALL([statx]); +CHECK_SECCOMP_SYSCALL([clock_gettime64]); CHECK_SECCOMP_SYSCALL([nonexistent]); AC_CONFIG_FILES([Makefile]) diff --git a/src/arping.c b/src/arping.c index 481491e..b3dca07 100644 --- a/src/arping.c +++ b/src/arping.c @@ -683,6 +683,9 @@ static void drop_seccomp(int libnet_fd) seccomp_allow(ctx, "newfstatat"); seccomp_allow(ctx, "exit_group"); seccomp_allow(ctx, "rt_sigreturn"); +#if HAVE_SECCOMP_SYSCALL_clock_gettime64 + seccomp_allow(ctx, "clock_gettime64"); +#endif // Load. if (seccomp_load(ctx)) {