From 934734de95f58d8ff35e2a8563dd23b25c27721d Mon Sep 17 00:00:00 2001
From: Michael Forney <mforney@mforney.org>
Date: Tue, 16 Oct 2018 21:00:49 -0700
Subject: openssh: Fall back to SANDBOX_RLIMIT when SANDBOX_SECCOMP_FILTER is
 not supported

---
 pkg/openssh/gen.lua | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to 'pkg/openssh/gen.lua')

diff --git a/pkg/openssh/gen.lua b/pkg/openssh/gen.lua
index 78b7aaa5..f23c42e8 100644
--- a/pkg/openssh/gen.lua
+++ b/pkg/openssh/gen.lua
@@ -1,8 +1,12 @@
 local arch = config.target.toolchain:match('[^-]*')
+local archflags = {
+	x86_64='-D SANDBOX_SECCOMP_FILTER=1 -D SECCOMP_AUDIT_ARCH=AUDIT_ARCH_X86_64',
+	aarch64='-D SANDBOX_SECCOMP_FILTER=1 -D SECCOMP_AUDIT_ARCH=AUDIT_ARCH_AARCH64',
+}
 cflags{
 	'-D _XOPEN_SOURCE=600',
 	'-D _DEFAULT_SOURCE',
-	'-D SECCOMP_AUDIT_ARCH=AUDIT_ARCH_'..arch:upper(),
+	archflags[config.target.toolchain:match('[^-]*')] or '-D SANDBOX_RLIMIT=1',
 	'-I $dir',
 	'-I $srcdir',
 	'-I $srcdir/openbsd-compat',
-- 
cgit v1.2.3