[gentoo-commits] repo/gentoo:master commit in: net-misc/lldpd/files/, net-misc/lldpd/

[Patrick McLean]

commit:     bb12143c16378a705ce8592ac5f304901f8665de
Author:     Patrick McLean <chutzpah <AT> gentoo <DOT> org>
AuthorDate: Tue Dec  6 00:34:56 2016 +0000
Commit:     Patrick McLean <chutzpah <AT> gentoo <DOT> org>
CommitDate: Tue Dec  6 00:35:29 2016 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=bb12143c

net-misc/lldpd: Revision bump, add sendmmsg and recvfrom to seccomp filter

Package-Manager: portage-2.3.2

 .../lldpd/files/lldpd-0.9.5-seccomp-add-socket-ops.patch    | 13 +++++++++++++
 .../lldpd/{lldpd-0.9.5.ebuild => lldpd-0.9.5-r1.ebuild}     |  5 +++--
 2 files changed, 16 insertions(+), 2 deletions(-)

diff --git a/net-misc/lldpd/files/lldpd-0.9.5-seccomp-add-socket-ops.patch 
b/net-misc/lldpd/files/lldpd-0.9.5-seccomp-add-socket-ops.patch
new file mode 100644
index 00000000..987ef9a
--- /dev/null
+++ b/net-misc/lldpd/files/lldpd-0.9.5-seccomp-add-socket-ops.patch
@@ -0,0 +1,13 @@
+diff --git a/src/daemon/priv-seccomp.c b/src/daemon/priv-seccomp.c
+index 97f4233..36184cd 100644
+--- a/src/daemon/priv-seccomp.c
++++ b/src/daemon/priv-seccomp.c
+@@ -167,6 +167,8 @@ priv_seccomp_init(int remote, int child)
+           (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(recvmsg), 0)) 
< 0 ||
+           (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(readv), 0)) < 
0 ||
+           (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(mprotect), 0)) 
< 0 ||
++          (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(sendmmsg), 0)) 
< 0 ||
++          (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(recvfrom), 0)) 
< 0 ||
+           /* The following are for resolving addresses */
+           (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(mmap), 0)) < 0 
||
+           (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(munmap), 0)) < 
0 ||

diff --git a/net-misc/lldpd/lldpd-0.9.5.ebuild 
b/net-misc/lldpd/lldpd-0.9.5-r1.ebuild
similarity index 96%
rename from net-misc/lldpd/lldpd-0.9.5.ebuild
rename to net-misc/lldpd/lldpd-0.9.5-r1.ebuild
index 27c5d99..fbba6a5 100644
--- a/net-misc/lldpd/lldpd-0.9.5.ebuild
+++ b/net-misc/lldpd/lldpd-0.9.5-r1.ebuild
@@ -35,12 +35,13 @@ REQUIRED_USE="graph? ( doc )"
 PATCHES=(
        "${FILESDIR}/${PN}-0.7.11-zsh-completion-dir.patch"
        "${FILESDIR}/${P}-seccomp-add-mprotect.patch"
+       "${FILESDIR}/${P}-seccomp-add-socket-ops.patch"
 )
 
 pkg_setup() {
        ebegin "Creating lldpd user and group"
-       enewgroup ${PN}
-       enewuser ${PN} -1 -1 -1 ${PN}
+       #enewgroup ${PN}
+       #enewuser ${PN} -1 -1 -1 ${PN}
        eend $?
 }