sys_linux: allow setting IP_FREEBIND option in seccomp filter
This is needed when chronyd is started with no allow directive, but the NTP server socket is opened by the allow command later.
This commit is contained in:
parent
5a40950ffd
commit
1619453b2b
1 changed files with 1 additions and 1 deletions
|
@ -478,7 +478,7 @@ SYS_Linux_EnableSystemCallFilter(int level)
|
|||
};
|
||||
|
||||
const static int socket_options[][2] = {
|
||||
{ SOL_IP, IP_PKTINFO },
|
||||
{ SOL_IP, IP_PKTINFO }, { SOL_IP, IP_FREEBIND },
|
||||
#ifdef FEAT_IPV6
|
||||
{ SOL_IPV6, IPV6_V6ONLY }, { SOL_IPV6, IPV6_RECVPKTINFO },
|
||||
#endif
|
||||
|
|
Loading…
Reference in a new issue