cantyonion/opi-openwrt
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

umdns: convert seccomp filter rules to OCI format

Browse Source 
procd-seccomp switched to OCI-compliant seccomp parser instead of our
(legacy, OpenWrt-specific) format. Convert ruleset to new format.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
This commit is contained in:
Daniel Golle 2020-11-17 13:11:16 +00:00
parent 62a3430f9b
commit 01b83040d3
2 changed files with 42 additions and 31 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
package/network/services/umdns/Makefile
View File

@ -8,7 +8,7 @@
include $(TOPDIR)/rules.mk include $(TOPDIR)/rules.mk
PKG_NAME:=umdns PKG_NAME:=umdns
PKG_RELEASE:=1 PKG_RELEASE:=2
PKG_SOURCE_URL=$(PROJECT_GIT)/project/mdnsd.git PKG_SOURCE_URL=$(PROJECT_GIT)/project/mdnsd.git
PKG_SOURCE_PROTO:=git PKG_SOURCE_PROTO:=git

15
package/network/services/umdns/files/umdns.json
View File

@ -1,5 +1,8 @@
{ {
"whitelist": [ "defaultAction": "SCMP_ACT_KILL_PROCESS",
"syscalls": [
{
"names": [
"read", "read",
"write", "write",
"open", "open",
@ -12,21 +15,29 @@
"connect", "connect",
"getsockname", "getsockname",
"recvmsg", "recvmsg",
"recvfrom",
"sendmsg", "sendmsg",
"sendto", "sendto",
"setsockopt", "setsockopt",
"socket", "socket",
"pipe",
"poll", "poll",
"fcntl64", "fcntl64",
"epoll_create", "epoll_create",
"epoll_create1",
"epoll_ctl", "epoll_ctl",
"epoll_wait", "epoll_wait",
"epoll_pwait",
"rt_sigaction", "rt_sigaction",
"sigreturn", "sigreturn",
"rt_sigreturn", "rt_sigreturn",
"rt_sigprocmask",
"exit_group", "exit_group",
"exit", "exit",
"fcntl",
"clock_gettime" "clock_gettime"
], ],
"policy": 1 "action": "SCMP_ACT_ALLOW"
}
]
} }