net-misc/lldpd: Revision bump, add sendmmsg and recvfrom to seccomp filter

Package-Manager: portage-2.3.2

diff --git a/net-misc/lldpd/files/lldpd-0.9.5-seccomp-add-socket-ops.patch b/net-misc/lldpd/files/lldpd-0.9.5-seccomp-add-socket-ops.patch
new file mode 100644 (file)
index 0000000..987ef9a
--- /dev/null
+++ b/net-misc/lldpd/files/lldpd-0.9.5-seccomp-add-socket-ops.patch
@@ -0,0 +1,13 @@
+diff --git a/src/daemon/priv-seccomp.c b/src/daemon/priv-seccomp.c
+index 97f4233..36184cd 100644
+--- a/src/daemon/priv-seccomp.c
++++ b/src/daemon/priv-seccomp.c
+@@ -167,6 +167,8 @@ priv_seccomp_init(int remote, int child)
+           (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(recvmsg), 0)) < 0 ||
+           (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(readv), 0)) < 0 ||
+           (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(mprotect), 0)) < 0 ||
++          (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(sendmmsg), 0)) < 0 ||
++          (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(recvfrom), 0)) < 0 ||
+           /* The following are for resolving addresses */
+           (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(mmap), 0)) < 0 ||
+           (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(munmap), 0)) < 0 ||

diff --git a/net-misc/lldpd/lldpd-0.9.5.ebuild b/net-misc/lldpd/lldpd-0.9.5-r1.ebuild
similarity index 96%
rename from net-misc/lldpd/lldpd-0.9.5.ebuild
rename to net-misc/lldpd/lldpd-0.9.5-r1.ebuild
index 27c5d992742277e2c25ab24bae62d62aca622aef..fbba6a568c3278f46f66fd35f29ed707e2a17fdf 100644 (file)
--- a/net-misc/lldpd/lldpd-0.9.5.ebuild
+++ b/net-misc/lldpd/lldpd-0.9.5-r1.ebuild
@@ -35,12 +35,13 @@ REQUIRED_USE="graph? ( doc )"
 PATCHES=(
        "${FILESDIR}/${PN}-0.7.11-zsh-completion-dir.patch"
        "${FILESDIR}/${P}-seccomp-add-mprotect.patch"
+       "${FILESDIR}/${P}-seccomp-add-socket-ops.patch"
 )
 
 pkg_setup() {
        ebegin "Creating lldpd user and group"
-       enewgroup ${PN}
-       enewuser ${PN} -1 -1 -1 ${PN}
+       #enewgroup ${PN}
+       #enewuser ${PN} -1 -1 -1 ${PN}
        eend $?
 }