blackbeard420/kore
1
0
Fork 0
mirror of https://github.com/jorisvink/kore synced 2025-03-09 04:29:02 -04:00
Code Issues Projects Releases Wiki Activity

Add unlink and rename system calls to whitelist.

Browse Source 
The keymgr uses these when handling entropy files.
This commit is contained in:
Joris Vink 2023-11-28 09:22:05 +01:00
parent dad6cc7bfe
commit ff5a3982ce
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/keymgr_openssl.c
View File

@ -85,6 +85,14 @@ static struct sock_filter filter_keymgr[] = {
/* Deny these, but with EACCESS instead of dying. */
KORE_SYSCALL_DENY(ioctl, EACCES),
/* Entropy handling. */
#if defined(SYS_unlink)
KORE_SYSCALL_ALLOW(unlink),
#endif
#if defined(SYS_rename)
KORE_SYSCALL_ALLOW(rename),
#endif
/* Required to deal with private keys and certs. */
#if defined(SYS_open)
KORE_SYSCALL_ALLOW(open),