privsep: Allow getrandom sysctl for newer glibc

Fixes #120

diff --git a/src/privsep-linux.c b/src/privsep-linux.c
index c2de54bac63fc27c124876229d4503673b44330b..4d5c195dd38c435499897bbfcf6f3cbdd2358179 100644 (file)
--- a/src/privsep-linux.c
+++ b/src/privsep-linux.c
@@ -325,6 +325,9 @@ static struct sock_filter ps_seccomp_filter[] = {
 #ifdef __NR_getpid
        SECCOMP_ALLOW(__NR_getpid),
 #endif
+#ifdef __NR_getrandom
+       SECCOMP_ALLOW(__NR_getrandom),
+#endif
 #ifdef __NR_getsockopt
        /* For route socket overflow */
        SECCOMP_ALLOW_ARG(__NR_getsockopt, 1, SOL_SOCKET),