Hi ports, Following up on file(1) thread[1] on tech@, and earlier submission on ports[2], adding permit to chflagsat(2) for cp(1), getdtablecount(2) and sendmsg(2) for file(1).
Thanks, --patrick [1] http://marc.info/?l=openbsd-tech&m=143345837620028&w=2 [2] http://marc.info/?l=openbsd-ports&m=143340587303885&w=2 Index: systrace.filter =================================================================== RCS file: /cvs/obsd/ports/infrastructure/db/systrace.filter,v retrieving revision 1.45 diff -u -p -u -p -r1.45 systrace.filter --- systrace.filter 11 Sep 2014 10:33:44 -0000 1.45 +++ systrace.filter 4 Jun 2015 22:25:08 -0000 @@ -22,6 +22,7 @@ native-chflags: filename match "${TMPDIR}" then permit native-chflags: filename match "${WRKDIR}" then permit native-chflags: filename match "/<non-existent filename>: *" then deny[enoent] + native-chflagsat: filename match "${WRKDIR}" then permit native-chmod: filename match "/tmp" then permit native-chmod: filename match "/var/tmp" then permit native-chmod: filename match "${TMPDIR}" then permit @@ -93,6 +94,7 @@ native-futimes: permit native-futimens: permit native-getdents: permit + native-getdtablecount: permit native-getegid: permit native-getentropy: permit native-geteuid: permit @@ -196,6 +198,7 @@ native-sendmsg: sockaddr match "${TMPDIR}" then permit native-sendmsg: sockaddr match "${WRKDIR}" then permit native-sendmsg: sockaddr match "/<non-existent filename>: *" then deny[enoent] + native-sendmsg: sockaddr eq "<unknown>" then permit native-sendsyslog: permit native-sendto: permit native-setegid: permit
