File vsftpd-seccomp-syslog.patch of Package vsftpd.8244
Index: seccompsandbox.c
===================================================================
--- seccompsandbox.c.orig
+++ seccompsandbox.c
@@ -477,6 +477,16 @@ seccomp_sandbox_setup_postlogin(const st
}
}
+ if (tunable_syslog_enable)
+ {
+ /* The ability to pass an address spec isn't needed so disable it. We ensure
+ * the 6th arg (socklen) is 0. We could have checked the 5th arg (sockptr)
+ * but I don't know if 64-bit compares work in the kernel filter, so we're
+ * happy to check the socklen arg, which is 32 bits.
+ */
+ allow_nr_1_arg_match(__NR_sendto, 6, 0);
+ }
+
if (tunable_text_userdb_names)
{
reject_nr(__NR_socket, EACCES);