From: Vincent Bernat Date: Mon, 10 Dec 2018 16:21:41 +0000 (+0100) Subject: daemon: allow lseek for seccomp X-Git-Tag: 1.0.4~21 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=cd752e02254d12242ffd3d2ecf7bf1dbab3af55a;p=thirdparty%2Flldpd.git daemon: allow lseek for seccomp --- diff --git a/src/daemon/priv-seccomp.c b/src/daemon/priv-seccomp.c index fe48ad3e..5a6e2ae8 100644 --- a/src/daemon/priv-seccomp.c +++ b/src/daemon/priv-seccomp.c @@ -149,6 +149,7 @@ priv_seccomp_init(int remote, int child) (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(write), 0)) < 0 || /* write needed for */ (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(open), 0)) < 0 || (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(openat), 0)) < 0 || + (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(lseek), 0)) < 0 || (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(fcntl), 0)) < 0 || (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(kill), 0)) < 0 || (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(socket), 0)) < 0 ||