fdbc4a0048
in various other places, allow these syscalls in seccomp filter. OBS-URL: https://build.opensuse.org/package/show/Base:System/file?expand=0&rev=280
15 lines
317 B
Diff
15 lines
317 B
Diff
diff --git a/src/seccomp.c b/src/seccomp.c
|
|
index ce824330..8a2c8a4c 100644
|
|
--- a/src/seccomp.c
|
|
+++ b/src/seccomp.c
|
|
@@ -80,6 +80,9 @@ enable_sandbox(void)
|
|
if (ctx == NULL)
|
|
return -1;
|
|
|
|
+ ALLOW_RULE(prctl);
|
|
+ ALLOW_RULE(getrandom);
|
|
+ ALLOW_RULE(rseq);
|
|
ALLOW_RULE(access);
|
|
ALLOW_RULE(brk);
|
|
ALLOW_RULE(close);
|