File vsftpd-seccomp-ssl.patch of Package vsftpd.8244

SSL initialization calls RAND_load_file() which needs stat() enabled.

Index: vsftpd-3.0.2/seccompsandbox.c
===================================================================
--- vsftpd-3.0.2.orig/seccompsandbox.c
+++ vsftpd-3.0.2/seccompsandbox.c
@@ -379,6 +379,8 @@ seccomp_sandbox_setup_prelogin(const str
   if (tunable_ssl_enable)
   {
     allow_nr_1_arg_match(__NR_recvmsg, 3, 0);
+    // called by RAND_load_file
+    allow_nr(__NR_stat);
   }
 
   //this is very probably an attempt to open /dev/log
openSUSE Build Service is sponsored by