diff options
| author | Colin Watson <cjwatson@debian.org> | 2018-01-03 08:03:44 +0000 |
|---|---|---|
| committer | Colin Watson <cjwatson@debian.org> | 2018-01-03 08:03:44 +0000 |
| commit | 976d142700b06fdc877952aed85fb9ae48941869 (patch) | |
| tree | cf366941ab07dc203da9fa49935cfe1750cb3cbc /lib | |
| parent | c93c355dc98ea17786f880ed3e88cef0b8824fda (diff) | |
Fix seccomp sandbox on Linux/ARM
* lib/sandbox.c (make_seccomp_filter): Add arm_fadvise64_64 and
arm_sync_file_range.
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/sandbox.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/sandbox.c b/lib/sandbox.c index 2ad47e95..545ac608 100644 --- a/lib/sandbox.c +++ b/lib/sandbox.c @@ -410,6 +410,8 @@ scmp_filter_ctx make_seccomp_filter (int permissive) SC_ALLOW ("syncfs"); /* Extra syscalls not in any of systemd's sets. */ + SC_ALLOW ("arm_fadvise64_64"); + SC_ALLOW ("arm_sync_file_range"); SC_ALLOW ("brk"); SC_ALLOW ("fadvise64"); SC_ALLOW ("fadvise64_64"); |