]> code.ossystems Code Review - openembedded-core.git/commit
glibc: add workaround for faccessat2 being blocked by seccomp filters uninative-3.0
authorRoss Burton <ross@burtonini.com>
Thu, 11 Feb 2021 14:46:45 +0000 (14:46 +0000)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 12 Feb 2021 23:32:11 +0000 (23:32 +0000)
commit4d6ad6d611834c2648d6bf9791cb8140967e2529
treeca91b488ace1eb6b9d873b88888453c8083c45af
parent92a9a86df9e3bcffb13d2f8b5dcbe7822170f734
glibc: add workaround for faccessat2 being blocked by seccomp filters

Older seccomp-based filters used in container frameworks will block faccessat2
calls as it's a relatively new syscall.  This isn't a big problem with
glibc <2.33 but 2.33 will call faccessat2 itself, get EPERM, and thenn be confused
about what to do as EPERM isn't an expected error code.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-core/glibc/glibc/faccessat2-perm.patch [new file with mode: 0644]
meta/recipes-core/glibc/glibc_2.33.bb