File vsftpd-seccomp-ssl.patch of Package vsftpd.8244
SSL initialization calls RAND_load_file() which needs stat() enabled.
Index: vsftpd-3.0.2/seccompsandbox.c
===================================================================
--- vsftpd-3.0.2.orig/seccompsandbox.c
+++ vsftpd-3.0.2/seccompsandbox.c
@@ -379,6 +379,8 @@ seccomp_sandbox_setup_prelogin(const str
if (tunable_ssl_enable)
{
allow_nr_1_arg_match(__NR_recvmsg, 3, 0);
+ // called by RAND_load_file
+ allow_nr(__NR_stat);
}
//this is very probably an attempt to open /dev/log