Commit graph

9 commits

Author SHA1 Message Date
Daniel Golle
c2f2e1706a
transmission: add a bunch of syscalls to seccomp filter
Add missing "inotify_add_watch", "inotify_init1" and "inotify_rm_watch"
syscalls to seccomp filter which are needed in case watch_dir feature
of transmission is used.

Fixes #16972
Reported-by: @siwind
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-11-20 11:57:10 +00:00
Ren Zongjia
1a5d35dd7b transmission: update seccomp config file
Add missing syscalls found using utrace.

Signed-off-by: Ren Zongjia <acooler15@foxmail.com>
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-10-28 16:31:30 +01:00
Daniel Golle
13516fa188
transmission: add two more syscalls to seccomp filter
Testing showed that additional syscalls are needed on ARMv7.
Add "clock_gettime64" and "statx" which seem to be used now instead
of "clock_gettime" and "stat" syscalls which are already listed.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-09-25 08:27:08 +01:00
Daniel Golle
1141ee1e51
transmission: add new syscalls to seccomp filter
Testing showed that additional syscalls are needed on ARMv7.
Add "getegid32", "geteuid32", "getgid32" and "getrandom" as they are
all innocent.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-07-10 22:04:50 +01:00
Daniel Golle
9ea8cccd35 transmission: add syscalls needed on PPC to seccomp rules
Add fadvise64_64 and fchmod syscalls needed on PowerPC platforms to
seccomp rules of transmission-daemon.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-01-06 22:17:40 +00:00
Daniel Golle
20c52fc651 transmission: jail: add allow 'getuid' syscall
transmission needs 'getuid', at least on mips_24kc.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-12-20 19:09:43 +00:00
Daniel Golle
6b2ec8bcb5
transmission: convert seccomp filter rules to OCI format
procd-seccomp switched to OCI-compliant seccomp parser instead of our
(legacy, OpenWrt-specific) format. Convert ruleset to new format.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-11-17 13:16:17 +00:00
Daniel Golle
3724ed3d68 transmission: add syscalls to seccomp filter
Syscalls observered when running on arm32. Add them to seccomp rule.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-03-08 17:43:03 +01:00
Daniel Golle
609109fa97 transmission: add seccomp filter and improve jail
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-01-04 17:09:21 +02:00