From: Patrick McLean <chutzpah@gentoo.org>
Date: Tue, 6 Dec 2016 00:34:56 +0000 (-0800)
Subject: net-misc/lldpd: Revision bump, add sendmmsg and recvfrom to seccomp filter
X-Git-Url: http://git.tremily.us/gitweb.cgi?a=commitdiff_plain;h=bb12143c16378a705ce8592ac5f304901f8665de;p=gentoo.git

net-misc/lldpd: Revision bump, add sendmmsg and recvfrom to seccomp filter

Package-Manager: portage-2.3.2
---

diff --git a/net-misc/lldpd/files/lldpd-0.9.5-seccomp-add-socket-ops.patch b/net-misc/lldpd/files/lldpd-0.9.5-seccomp-add-socket-ops.patch
new file mode 100644
index 000000000000..987ef9a515c5
--- /dev/null
+++ b/net-misc/lldpd/files/lldpd-0.9.5-seccomp-add-socket-ops.patch
@@ -0,0 +1,13 @@
+diff --git a/src/daemon/priv-seccomp.c b/src/daemon/priv-seccomp.c
+index 97f4233..36184cd 100644
+--- a/src/daemon/priv-seccomp.c
++++ b/src/daemon/priv-seccomp.c
+@@ -167,6 +167,8 @@ priv_seccomp_init(int remote, int child)
+ 	    (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(recvmsg), 0)) < 0 ||
+ 	    (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(readv), 0)) < 0 ||
+ 	    (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(mprotect), 0)) < 0 ||
++	    (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(sendmmsg), 0)) < 0 ||
++	    (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(recvfrom), 0)) < 0 ||
+ 	    /* The following are for resolving addresses */
+ 	    (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(mmap), 0)) < 0 ||
+ 	    (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(munmap), 0)) < 0 ||
diff --git a/net-misc/lldpd/lldpd-0.9.5.ebuild b/net-misc/lldpd/lldpd-0.9.5-r1.ebuild
similarity index 96%
rename from net-misc/lldpd/lldpd-0.9.5.ebuild
rename to net-misc/lldpd/lldpd-0.9.5-r1.ebuild
index 27c5d9927422..fbba6a568c32 100644
--- a/net-misc/lldpd/lldpd-0.9.5.ebuild
+++ b/net-misc/lldpd/lldpd-0.9.5-r1.ebuild
@@ -35,12 +35,13 @@ REQUIRED_USE="graph? ( doc )"
 PATCHES=(
 	"${FILESDIR}/${PN}-0.7.11-zsh-completion-dir.patch"
 	"${FILESDIR}/${P}-seccomp-add-mprotect.patch"
+	"${FILESDIR}/${P}-seccomp-add-socket-ops.patch"
 )
 
 pkg_setup() {
 	ebegin "Creating lldpd user and group"
-	enewgroup ${PN}
-	enewuser ${PN} -1 -1 -1 ${PN}
+	#enewgroup ${PN}
+	#enewuser ${PN} -1 -1 -1 ${PN}
 	eend $?
 }