Retropex/bitcoin
1
0
Fork 0
mirror of https://github.com/Retropex/bitcoin.git synced 2025-05-19 14:40:45 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge bitcoin/bitcoin#23179: sandbox: add newfstatat & copy_file_range to allowed filesystem syscalls

Browse Source 
44d77d2213 sandbox: add copy_file_range to allowed filesystem syscalls (fanquake)
ee08741c9c sandbox: add newfstatat to allowed filesystem syscalls (fanquake)

Pull request description:

  Similar to #23178, this is a follow up to #20487, which has broken running the unit tests for some developers. Fix this by adding `newfstatat` to the list of allowed filesystem related calls.

ACKs for top commit:
  achow101:
    ACK 44d77d2213
  laanwj:
    Code review ACK  44d77d2213
  practicalswift:
    cr ACK 44d77d2213

Tree-SHA512: ce9d1b441ebf25bd2cf290566e05864223c1418dab315c962e1094ad877db5dd9fcab94ab98a46da8b712a8f5f46675d62ca3349215d8df46ec5b3c4d72dbaa6
This commit is contained in:
MarcoFalke 2021-10-05 11:35:12 +02:00
commit c79d9fb2f6
No known key found for this signature in database
GPG Key ID: CE2B75697E69A548
1 changed files with 27 additions and 25 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

52
src/util/syscall_sandbox.cpp
View File

@ -536,31 +536,33 @@ public:
void AllowFileSystem() void AllowFileSystem()
{ {
allowed_syscalls.insert(__NR_access); // check user's permissions for a file allowed_syscalls.insert(__NR_access); // check user's permissions for a file
allowed_syscalls.insert(__NR_chdir); // change working directory allowed_syscalls.insert(__NR_chdir); // change working directory
allowed_syscalls.insert(__NR_chmod); // change permissions of a file allowed_syscalls.insert(__NR_chmod); // change permissions of a file
allowed_syscalls.insert(__NR_fallocate); // manipulate file space allowed_syscalls.insert(__NR_copy_file_range); // copy a range of data from one file to another
allowed_syscalls.insert(__NR_fchmod); // change permissions of a file allowed_syscalls.insert(__NR_fallocate); // manipulate file space
allowed_syscalls.insert(__NR_fchown); // change ownership of a file allowed_syscalls.insert(__NR_fchmod); // change permissions of a file
allowed_syscalls.insert(__NR_fdatasync); // synchronize a file's in-core state with storage device allowed_syscalls.insert(__NR_fchown); // change ownership of a file
allowed_syscalls.insert(__NR_flock); // apply or remove an advisory lock on an open file allowed_syscalls.insert(__NR_fdatasync); // synchronize a file's in-core state with storage device
allowed_syscalls.insert(__NR_fstat); // get file status allowed_syscalls.insert(__NR_flock); // apply or remove an advisory lock on an open file
allowed_syscalls.insert(__NR_fsync); // synchronize a file's in-core state with storage device allowed_syscalls.insert(__NR_fstat); // get file status
allowed_syscalls.insert(__NR_ftruncate); // truncate a file to a specified length allowed_syscalls.insert(__NR_newfstatat); // get file status
allowed_syscalls.insert(__NR_getcwd); // get current working directory allowed_syscalls.insert(__NR_fsync); // synchronize a file's in-core state with storage device
allowed_syscalls.insert(__NR_getdents); // get directory entries allowed_syscalls.insert(__NR_ftruncate); // truncate a file to a specified length
allowed_syscalls.insert(__NR_getdents64); // get directory entries allowed_syscalls.insert(__NR_getcwd); // get current working directory
allowed_syscalls.insert(__NR_lstat); // get file status allowed_syscalls.insert(__NR_getdents); // get directory entries
allowed_syscalls.insert(__NR_mkdir); // create a directory allowed_syscalls.insert(__NR_getdents64); // get directory entries
allowed_syscalls.insert(__NR_open); // open and possibly create a file allowed_syscalls.insert(__NR_lstat); // get file status
allowed_syscalls.insert(__NR_openat); // open and possibly create a file allowed_syscalls.insert(__NR_mkdir); // create a directory
allowed_syscalls.insert(__NR_readlink); // read value of a symbolic link allowed_syscalls.insert(__NR_open); // open and possibly create a file
allowed_syscalls.insert(__NR_rename); // change the name or location of a file allowed_syscalls.insert(__NR_openat); // open and possibly create a file
allowed_syscalls.insert(__NR_rmdir); // delete a directory allowed_syscalls.insert(__NR_readlink); // read value of a symbolic link
allowed_syscalls.insert(__NR_stat); // get file status allowed_syscalls.insert(__NR_rename); // change the name or location of a file
allowed_syscalls.insert(__NR_statfs); // get filesystem statistics allowed_syscalls.insert(__NR_rmdir); // delete a directory
allowed_syscalls.insert(__NR_statx); // get file status (extended) allowed_syscalls.insert(__NR_stat); // get file status
allowed_syscalls.insert(__NR_unlink); // delete a name and possibly the file it refers to allowed_syscalls.insert(__NR_statfs); // get filesystem statistics
allowed_syscalls.insert(__NR_statx); // get file status (extended)
allowed_syscalls.insert(__NR_unlink); // delete a name and possibly the file it refers to
} }
void AllowFutex() void AllowFutex()