umdns: add missing syscalls to seccomp filter

Looks like 'openat', 'pipe2' and 'ppoll' are now needed, possibly due
to changes on libraries used by umdns now using slightly different
calls.

Found using
/etc/init.d/umdns trace
now use umdns, ie. cover all ubus call etc., then
/etc/init.d/umdns stop
find list of syscalls traced in /tmp/umdns.*.json

Fixes: FS#3355 ("UMDNS: does not start on master with seccomp")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
This commit is contained in:
Daniel Golle 2021-04-10 17:30:49 +01:00 committed by AmadeusGhost
parent 821d4bba4d
commit b7237dd61a
2 changed files with 31 additions and 22 deletions

View File

@ -8,7 +8,7 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=umdns
PKG_RELEASE:=3
PKG_RELEASE:=4
PKG_SOURCE_URL=$(PROJECT_GIT)/project/mdnsd.git
PKG_SOURCE_PROTO:=git

View File

@ -1,34 +1,43 @@
{
"whitelist": [
"read",
"write",
"writev",
"open",
"close",
"time",
"brk",
"ioctl",
"uname",
"bind",
"brk",
"clock_gettime",
"close",
"connect",
"epoll_create",
"epoll_create1",
"epoll_ctl",
"epoll_pwait",
"epoll_wait",
"exit",
"exit_group",
"fcntl",
"fcntl64",
"fstat",
"getsockname",
"ioctl",
"open",
"openat",
"pipe",
"pipe2",
"poll",
"ppoll",
"read",
"recvfrom",
"recvmsg",
"rt_sigaction",
"rt_sigprocmask",
"rt_sigreturn",
"sendmsg",
"sendto",
"setsockopt",
"socket",
"poll",
"fcntl64",
"fstat",
"epoll_create",
"epoll_ctl",
"epoll_wait",
"rt_sigaction",
"sigreturn",
"rt_sigreturn",
"exit_group",
"exit",
"clock_gettime"
"socket",
"time",
"uname",
"write",
"writev"
],
"policy": 1
}