From b655d91b8cb3b60be16c940d7bf4b192c2624a7b Mon Sep 17 00:00:00 2001 From: Anton Lindqvist Date: Wed, 4 Mar 2020 16:46:46 +0100 Subject: sys/openbsd: prevent killing the ssh VM connection This is one of the root causes of the 'no output from test machine' panic. Issuing a DIOCKILLSTATES ioctl on a /dev/pf file descriptor will cause state associated with ongoing connections to be purged; effectively killing the ssh connection to the VM. Including net/pfvar.h is necessary in order to make use of the DIOCKILLSTATES define. --- sys/openbsd/dev_pf.txt | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 sys/openbsd/dev_pf.txt (limited to 'sys/openbsd/dev_pf.txt') diff --git a/sys/openbsd/dev_pf.txt b/sys/openbsd/dev_pf.txt new file mode 100644 index 000000000..4dfd44aec --- /dev/null +++ b/sys/openbsd/dev_pf.txt @@ -0,0 +1,17 @@ +# Copyright 2020 syzkaller project authors. All rights reserved. +# Use of this source code is governed by Apache 2 LICENSE that can be found in the LICENSE file. + +include +include +include +include +include + +include + +# This ioctl is restricted in SanitizeCall(), see init.go. +_ = DIOCKILLSTATES + +resource fd_pf[fd] + +openat$pf(fd const[AT_FDCWD], file ptr[in, string["/dev/pf"]], flags flags[open_flags], mode const[0]) fd_pf -- cgit mrf-deployment