kcgi: update to 0.13.2.

This commit is contained in:
Duncaen 2023-11-26 14:18:29 +01:00
parent 32fe9612ee
commit 5793972a6a
No known key found for this signature in database
GPG key ID: 335C1D17EC3D6E35
2 changed files with 2 additions and 38 deletions

View file

@ -1,36 +0,0 @@
From 3f41e39c020d5b135e98fe025f259a5ac999129e Mon Sep 17 00:00:00 2001
From: Duncan Overbruck <mail@duncano.de>
Date: Mon, 20 Nov 2023 21:59:50 +0100
Subject: [PATCH] allow some missing syscalls for i386 with glibc
---
sandbox-seccomp-filter.c | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
index a2e009d..46db374 100644
--- a/sandbox-seccomp-filter.c
+++ b/sandbox-seccomp-filter.c
@@ -102,6 +102,9 @@ static const struct sock_filter preauth_ctrl[] = {
#endif
#ifdef __NR_accept /* not defined for __i386__ (linux) */
SC_ALLOW(accept),
+#endif
+#ifdef __NR_socketcall /* used for accept on __i386__ (linux) */
+ SC_ALLOW(socketcall),
#endif
SC_ALLOW(fcntl),
#ifdef __NR_fcntl64 /* only noted on arm */
@@ -190,6 +193,9 @@ static const struct sock_filter preauth_work[] = {
SC_ALLOW(fstat), /* for kutil_openlog logging */
#ifdef __NR_newfstatat
SC_ALLOW(newfstatat), /* for kutil_openlog logging */
+#endif
+#ifdef __NR_statx
+ SC_ALLOW(statx), /* for kutil_openlog logging */
#endif
SC_ALLOW(write),
SC_ALLOW(writev),
--
2.42.0

View file

@ -1,6 +1,6 @@
# Template file for 'kcgi'
pkgname=kcgi
version=0.13.1
version=0.13.2
revision=1
build_style=configure
configure_args="PREFIX=/usr MANDIR=/usr/share/man SBINDIR=/usr/bin"
@ -15,7 +15,7 @@ license="ISC"
homepage="http://kristaps.bsd.lv/kcgi/"
changelog="https://kristaps.bsd.lv/kcgi/archive.html"
distfiles="http://kristaps.bsd.lv/kcgi/snapshots/kcgi-${version}.tgz"
checksum=3246ee78a091b496f7040c5f29fb9e45a7aa2873f4d8d77a30b6437f07db4d49
checksum=63015ad94418749a9ee402b91d686bb26e9ea108c4994e7b91713c95952b2175
export CFLAGS="-DENABLE_SECCOMP_FILTER=1"