openssh: Pick upstream fix for gettid seccomp
At present, the sshd child processes limit a number of syscalls
to reduce the attack surface. One of the blocked syscalls is
gettid. However, gettid is necessary for GWP-ASan support, scudo,
and some other allocators.
Upstream has already patched a fix for the issue. This CL cherrypicks
the upstream patch, moves it under a new cherry/ directory (to mimic
our other cherrypick schemes), and applies it accordingly.
BUG=b:225008839
TEST=emerge-volteer openssh; confirmed apply
Change-Id: If9f6330824b843428fb66b975d488e9f22b645e1
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/overlays/portage-stable/+/3863239
Tested-by: Jordan Abrahams-Whitehead <ajordanr@google.com>
Reviewed-by: Allen Webb <allenwebb@google.com>
Commit-Queue: Jordan Abrahams-Whitehead <ajordanr@google.com>
2 files changed
