DWS/chrony
1
0
Fork 0
mirror of https://gitlab.com/chrony/chrony.git synced 2025-12-05 09:05:07 -05:00
Code Issues Packages Projects Releases Wiki Activity

sys_linux: allow setting IP_FREEBIND option in seccomp filter

Browse Source 
This is needed when chronyd is started with no allow directive, but the
NTP server socket is opened by the allow command later.
This commit is contained in:
Miroslav Lichvar
2015-09-09 16:36:48 +02:00
parent 5a40950ffd
commit 1619453b2b
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
sys_linux.c
View File

@@ -478,7 +478,7 @@ SYS_Linux_EnableSystemCallFilter(int level)
}; };
const static int socket_options[][2] = { const static int socket_options[][2] = {
{ SOL_IP, IP_PKTINFO }, { SOL_IP, IP_PKTINFO }, { SOL_IP, IP_FREEBIND },
#ifdef FEAT_IPV6 #ifdef FEAT_IPV6
{ SOL_IPV6, IPV6_V6ONLY }, { SOL_IPV6, IPV6_RECVPKTINFO }, { SOL_IPV6, IPV6_V6ONLY }, { SOL_IPV6, IPV6_RECVPKTINFO },
#endif #endif