From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gentoo-commits+bounces-1339510-garchives=archives.gentoo.org@lists.gentoo.org>
Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits))
	(No client certificate requested)
	by finch.gentoo.org (Postfix) with ESMTPS id DDC08158086
	for <garchives@archives.gentoo.org>; Sun, 14 Nov 2021 08:49:05 +0000 (UTC)
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id 2A42EE0B30;
	Sun, 14 Nov 2021 08:49:05 +0000 (UTC)
Received: from smtp.gentoo.org (woodpecker.gentoo.org [140.211.166.183])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits))
	(No client certificate requested)
	by pigeon.gentoo.org (Postfix) with ESMTPS id D2FADE0B2E
	for <gentoo-commits@lists.gentoo.org>; Sun, 14 Nov 2021 08:49:03 +0000 (UTC)
Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits))
	(No client certificate requested)
	by smtp.gentoo.org (Postfix) with ESMTPS id D5CD9342E21
	for <gentoo-commits@lists.gentoo.org>; Sun, 14 Nov 2021 08:49:02 +0000 (UTC)
Received: from localhost.localdomain (localhost [IPv6:::1])
	by oystercatcher.gentoo.org (Postfix) with ESMTP id 8FB77175
	for <gentoo-commits@lists.gentoo.org>; Sun, 14 Nov 2021 08:49:01 +0000 (UTC)
From: "Sam James" <sam@gentoo.org>
To: gentoo-commits@lists.gentoo.org
Content-Transfer-Encoding: 8bit
Content-type: text/plain; charset=UTF-8
Reply-To: gentoo-dev@lists.gentoo.org, "Sam James" <sam@gentoo.org>
Message-ID: <1636879732.96b3c7a5f76e2d6f66f307816f06cda43fad1a7b.sam@gentoo>
Subject: [gentoo-commits] repo/gentoo:master commit in: net-misc/ntpsec/files/, net-misc/ntpsec/
X-VCS-Repository: repo/gentoo
X-VCS-Files: net-misc/ntpsec/files/ntpsec-1.2.1-seccomp-glibc-2-3-4.patch net-misc/ntpsec/ntpsec-1.2.1-r1.ebuild net-misc/ntpsec/ntpsec-1.2.1.ebuild
X-VCS-Directories: net-misc/ntpsec/ net-misc/ntpsec/files/
X-VCS-Committer: sam
X-VCS-Committer-Name: Sam James
X-VCS-Revision: 96b3c7a5f76e2d6f66f307816f06cda43fad1a7b
X-VCS-Branch: master
Date: Sun, 14 Nov 2021 08:49:01 +0000 (UTC)
Precedence: bulk
List-Post: <mailto:gentoo-commits@lists.gentoo.org>
List-Help: <mailto:gentoo-commits+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-commits+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-commits+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-commits.gentoo.org>
X-BeenThere: gentoo-commits@lists.gentoo.org
X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply
X-Archives-Salt: 319bd42c-452e-4675-b743-501d82af815c
X-Archives-Hash: a8b8fc42fdc37bcb6f25c9eb0bc35ded

commit:     96b3c7a5f76e2d6f66f307816f06cda43fad1a7b
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Sun Nov 14 08:47:06 2021 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Sun Nov 14 08:48:52 2021 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=96b3c7a5

net-misc/ntpsec: allow clone3 for glibc-2.34 (seccomp filter fix)

Closes: https://bugs.gentoo.org/823692
Signed-off-by: Sam James <sam <AT> gentoo.org>

 .../files/ntpsec-1.2.1-seccomp-glibc-2-3-4.patch      | 19 +++++++++++++++++++
 .../{ntpsec-1.2.1.ebuild => ntpsec-1.2.1-r1.ebuild}   |  1 +
 2 files changed, 20 insertions(+)

diff --git a/net-misc/ntpsec/files/ntpsec-1.2.1-seccomp-glibc-2-3-4.patch b/net-misc/ntpsec/files/ntpsec-1.2.1-seccomp-glibc-2-3-4.patch
new file mode 100644
index 000000000000..65b718285a8d
--- /dev/null
+++ b/net-misc/ntpsec/files/ntpsec-1.2.1-seccomp-glibc-2-3-4.patch
@@ -0,0 +1,19 @@
+https://bugs.gentoo.org/823692
+
+From 170d60b7e269154fb108bb4b010ee5ee0110bf2d Mon Sep 17 00:00:00 2001
+From: Sam James <sam@gentoo.org>
+Date: Sun, 14 Nov 2021 08:44:28 +0000
+Subject: [PATCH] ntpd/ntp_sandbox.c: allow clone3 in seccomp filter for
+ glibc-2.34
+
+Signed-off-by: Sam James <sam@gentoo.org>
+--- a/ntpd/ntp_sandbox.c
++++ b/ntpd/ntp_sandbox.c
+@@ -403,6 +403,7 @@ int scmp_sc[] = {
+  * rather than generate a trap.
+  */
+ 	SCMP_SYS(clone),	/* threads */
++	SCMP_SYS(clone3),
+ 	SCMP_SYS(kill),		/* generate signal */
+ 	SCMP_SYS(madvise),
+ 	SCMP_SYS(mprotect),

diff --git a/net-misc/ntpsec/ntpsec-1.2.1.ebuild b/net-misc/ntpsec/ntpsec-1.2.1-r1.ebuild
similarity index 98%
rename from net-misc/ntpsec/ntpsec-1.2.1.ebuild
rename to net-misc/ntpsec/ntpsec-1.2.1-r1.ebuild
index 60874b5802b2..c206360674b5 100644
--- a/net-misc/ntpsec/ntpsec-1.2.1.ebuild
+++ b/net-misc/ntpsec/ntpsec-1.2.1-r1.ebuild
@@ -62,6 +62,7 @@ PATCHES=(
 	"${FILESDIR}/${PN}-1.1.9-remove-asciidoctor-from-config.patch"
 	"${FILESDIR}/${PN}-1.2.0-move-newfstatat.patch"
 	"${FILESDIR}/${PN}-1.2.0-seccomp.patch"
+	"${FILESDIR}/${PN}-1.2.1-seccomp-glibc-2-3-4.patch"
 )
 
 WAF_BINARY="${S}/waf"