net-misc/ntpsec: backport fix for seccomp + early-droproot

See: https://gitlab.com/NTPsec/ntpsec/issues/460
Package-Manager: Portage-2.3.19, Repoman-2.3.6

diff --git a/net-misc/ntpsec/files/ntpsec-1.0.0-fix-seccomp.patch b/net-misc/ntpsec/files/ntpsec-1.0.0-fix-seccomp.patch
new file mode 100644 (file)
index 0000000..b971656
--- /dev/null
+++ b/net-misc/ntpsec/files/ntpsec-1.0.0-fix-seccomp.patch
@@ -0,0 +1,16 @@
+This is a backport of https://gitlab.com/NTPsec/ntpsec/commit/eef92d6217da03ad2ae41e298d110bdb05031381
+
+diff -Naur ntpsec-1.0.0.orig/ntpd/ntp_sandbox.c ntpsec-1.0.0/ntpd/ntp_sandbox.c
+--- ntpsec-1.0.0.orig/ntpd/ntp_sandbox.c       2017-10-09 23:54:39.000000000 -0400
++++ ntpsec-1.0.0/ntpd/ntp_sandbox.c    2018-02-28 07:31:28.381406881 -0500
+@@ -354,6 +354,10 @@
+       SCMP_SYS(write),
+         SCMP_SYS(unlink),
+ 
++#ifdef ENABLE_EARLY_DROPROOT
++      SCMP_SYS(getdents),
++#endif
++
+ #ifdef ENABLE_DNS_LOOKUP
+ /* Don't comment out this block for testing.
+  * pthread_create blocks signals so it will crash

diff --git a/net-misc/ntpsec/ntpsec-1.0.0-r5.ebuild b/net-misc/ntpsec/ntpsec-1.0.0-r6.ebuild
similarity index 97%
rename from net-misc/ntpsec/ntpsec-1.0.0-r5.ebuild
rename to net-misc/ntpsec/ntpsec-1.0.0-r6.ebuild
index 5ab45707dee908081da5bfb056ae5cf162667ee1..890ec4f7ebf4c092f4b604847fdec573eb390337 100644 (file)
--- a/net-misc/ntpsec/ntpsec-1.0.0-r5.ebuild
+++ b/net-misc/ntpsec/ntpsec-1.0.0-r6.ebuild
@@ -66,6 +66,10 @@ pkg_setup() {
 
 src_prepare() {
        default
+
+       # See https://gitlab.com/NTPsec/ntpsec/issues/460
+       eapply "${FILESDIR}"/${P}-fix-seccomp.patch
+
        python_copy_sources
 }