Difuse/packages
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

transmission: convert seccomp filter rules to OCI format

Browse source 
procd-seccomp switched to OCI-compliant seccomp parser instead of our
(legacy, OpenWrt-specific) format. Convert ruleset to new format.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
This commit is contained in:
Daniel Golle 2020-11-17 13:14:02 +00:00
parent 316f870228
commit 6b2ec8bcb5
No known key found for this signature in database
GPG key ID: DD8D36F0A710502F
2 changed files with 85 additions and 80 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
net/transmission/Makefile
View file

@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=transmission PKG_NAME:=transmission
PKG_VERSION:=3.00 PKG_VERSION:=3.00
PKG_RELEASE:=7 PKG_RELEASE:=8
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_SOURCE_URL:=@GITHUB/transmission/transmission-releases/master PKG_SOURCE_URL:=@GITHUB/transmission/transmission-releases/master

163
net/transmission/files/transmission-daemon.json
View file

@ -1,81 +1,86 @@
{ {
"whitelist": [ "defaultAction": "SCMP_ACT_KILL_PROCESS",
"accept", "syscalls": [
"accept4", {
"access", "names": [
"arm_fadvise64_64", "accept",
"bind", "accept4",
"brk", "access",
"clock_gettime", "arm_fadvise64_64",
"clone", "bind",
"close", "brk",
"connect", "clock_gettime",
"epoll_create1", "clone",
"epoll_ctl", "close",
"epoll_pwait", "connect",
"exit", "epoll_create1",
"exit_group", "epoll_ctl",
"fadvise64", "epoll_pwait",
"fallocate", "exit",
"fcntl", "exit_group",
"fcntl64", "fadvise64",
"fstat", "fallocate",
"fstat64", "fcntl",
"fsync", "fcntl64",
"futex", "fstat",
"getdents64", "fstat64",
"getpeername", "fsync",
"getpid", "futex",
"getsockname", "getdents64",
"getsockopt", "getpeername",
"getuid32", "getpid",
"ioctl", "getsockname",
"listen", "getsockopt",
"_llseek", "getuid32",
"lseek", "ioctl",
"madvise", "listen",
"membarrier", "_llseek",
"mkdir", "lseek",
"mmap", "madvise",
"mmap2", "membarrier",
"mprotect", "mkdir",
"mremap", "mmap",
"munmap", "mmap2",
"nanosleep", "mprotect",
"_newselect", "mremap",
"open", "munmap",
"pipe", "nanosleep",
"pipe2", "_newselect",
"poll", "open",
"pread64", "pipe",
"prlimit64", "pipe2",
"pwrite64", "poll",
"quotactl", "pread64",
"read", "prlimit64",
"readlink", "pwrite64",
"readv", "quotactl",
"recvfrom", "read",
"rename", "readlink",
"rmdir", "readv",
"rt_sigaction", "recvfrom",
"rt_sigprocmask", "rename",
"rt_sigreturn", "rmdir",
"select", "rt_sigaction",
"sendto", "rt_sigprocmask",
"setsockopt", "rt_sigreturn",
"shutdown", "select",
"sigreturn", "sendto",
"socket", "setsockopt",
"stat", "shutdown",
"stat64", "sigreturn",
"socketpair", "socket",
"umask", "stat",
"uname", "stat64",
"unlink", "socketpair",
"statfs64", "umask",
"umask", "uname",
"write", "unlink",
"writev" "statfs64",
], "umask",
"policy": 1 "write",
"writev"
],
"action": "SCMP_ACT_ALLOW"
}
]
} }