smlinux/heavybuilds/firefox/sandbox-sched_setscheduler.patch
PktSurf 03b8e2675c Split build() into prepbuilddir() and build() functions in base, xorg, gtk, extra and
net subsection package build files
Upgraded base/rust to 1.64.0
Added cbindgen 0.24.3 to base
Upgraded base/gdbm to 1.23
Added -mno-outline-atomics as CXXFLAGS to fix build breakage in base/gpgme
Fixed rc.gtk script in base/initfs
Added preservestaticlibs to prevent static libraries from being discarded and upgraded base/libcap to 2.67
Upgraded base/nodejs to 18.14.2
Temporarily discarded unnecessary code and comments in installpkg script in base/pkgtools
Added protobuf 3.14.0 to base
Upgraded base/python3 to 3.9.16
Upgraded base/sccache to 0.3.3
Upgraded extra/abiword to 3.0.5
Added adafruit-io 2.7.0 to extra
Added code to discard creation of systemd directory in extra/bluez
Added code to discard /usr directory in extra/ffmpeg
Removed unnecessary CFLAGS in extra/freerdp
Upgraded extra/imagemagick to 7.1.0
Upgraded extra/vim to 9.0.1000
Added build option to disable linking against gtk2 in extra/xarchiver
Upgraded heavybuilds/firefox to 102.8.0 ESR, discarded extraneous files that were part of it
Upgraded net/fail2ban to 1.0.2
Discarded unnecessary CFLAGS in net/lynx
Optimised build code in net/maccalc
Fixed noautoconfsite variable and added --disable-xxhash build option to net/rsync
Removed unnecessary CFLAGS in xorg/libtiff and xorg/libxklavier
2023-03-13 00:45:56 +05:30

16 lines
609 B
Diff

upstream bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1657849
--- a/security/sandbox/linux/SandboxFilter.cpp
+++ b/security/sandbox/linux/SandboxFilter.cpp
@@ -1694,10 +1694,10 @@
return Allow();
case __NR_sched_get_priority_min:
case __NR_sched_get_priority_max:
+ case __NR_sched_setscheduler:
return Allow();
case __NR_sched_getparam:
- case __NR_sched_getscheduler:
- case __NR_sched_setscheduler: {
+ case __NR_sched_getscheduler: {
Arg<pid_t> pid(0);
return If(pid == 0, Allow()).Else(Trap(SchedTrap, nullptr));
}