Permit utimensat(2) and futimens(2), as discussed with matthew@.
Fixes ruby 1.9 build with systrace now that we have these system calls. The other new *at system calls need to have path restrictions and will need further work so are still prevented for now (in those cases, the supplied paths are *relative to a certain FD*, so we can't simply examine supplied paths).
This commit is contained in:
parent
6faf9b152f
commit
be0593709c
@ -72,6 +72,7 @@
|
||||
native-fsync: permit
|
||||
native-ftruncate: permit
|
||||
native-futimes: permit
|
||||
native-futimens: permit
|
||||
native-getdirentries: permit
|
||||
native-getegid: permit
|
||||
native-geteuid: permit
|
||||
@ -190,6 +191,7 @@
|
||||
native-symlink: string eq "" and filename eq "" then deny[enoent]
|
||||
native-sync: permit
|
||||
native-umask: permit
|
||||
native-utimensat: permit
|
||||
native-utimes: permit
|
||||
native-vfork: permit
|
||||
native-wait4: permit
|
||||
|
Loading…
Reference in New Issue
Block a user