cantyonion/opi-openwrt
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

umdns: convert seccomp filter rules to OCI format

Browse Source 
procd-seccomp switched to OCI-compliant seccomp parser instead of our
(legacy, OpenWrt-specific) format. Convert ruleset to new format.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
This commit is contained in:
Daniel Golle 2020-11-17 13:11:16 +00:00
parent 62a3430f9b
commit 01b83040d3
2 changed files with 42 additions and 31 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
package/network/services/umdns/Makefile
View File

@ -8,7 +8,7 @@
include $(TOPDIR)/rules.mk include $(TOPDIR)/rules.mk
PKG_NAME:=umdns PKG_NAME:=umdns
PKG_RELEASE:=1 PKG_RELEASE:=2
PKG_SOURCE_URL=$(PROJECT_GIT)/project/mdnsd.git PKG_SOURCE_URL=$(PROJECT_GIT)/project/mdnsd.git
PKG_SOURCE_PROTO:=git PKG_SOURCE_PROTO:=git

71
package/network/services/umdns/files/umdns.json
View File

@ -1,32 +1,43 @@
{ {
"whitelist": [ "defaultAction": "SCMP_ACT_KILL_PROCESS",
"read", "syscalls": [
"write", {
"open", "names": [
"close", "read",
"time", "write",
"brk", "open",
"ioctl", "close",
"uname", "time",
"bind", "brk",
"connect", "ioctl",
"getsockname", "uname",
"recvmsg", "bind",
"sendmsg", "connect",
"sendto", "getsockname",
"setsockopt", "recvmsg",
"socket", "recvfrom",
"poll", "sendmsg",
"fcntl64", "sendto",
"epoll_create", "setsockopt",
"epoll_ctl", "socket",
"epoll_wait", "pipe",
"rt_sigaction", "poll",
"sigreturn", "fcntl64",
"rt_sigreturn", "epoll_create",
"exit_group", "epoll_create1",
"exit", "epoll_ctl",
"clock_gettime" "epoll_wait",
], "epoll_pwait",
"policy": 1 "rt_sigaction",
"sigreturn",
"rt_sigreturn",
"rt_sigprocmask",
"exit_group",
"exit",
"fcntl",
"clock_gettime"
],
"action": "SCMP_ACT_ALLOW"
}
]
} }