From 206e14ae068bade2db5e34e1d915c7cdec449271 Mon Sep 17 00:00:00 2001 From: Vincent Bernat Date: Thu, 30 Jan 2025 07:28:49 +0100 Subject: [PATCH] daemon: add clock_gettime64 to seccomp profile Fix #710 --- src/daemon/priv-seccomp.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/daemon/priv-seccomp.c b/src/daemon/priv-seccomp.c index 8322cb28..7f9419a4 100644 --- a/src/daemon/priv-seccomp.c +++ b/src/daemon/priv-seccomp.c @@ -175,6 +175,8 @@ priv_seccomp_init(int remote, int child) (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(sendmmsg), 0)) < 0 || (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(clock_gettime), 0)) < 0 || + (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(clock_gettime64), 0)) < + 0 || (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(gettimeofday), 0)) < 0 || (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(newfstatat), 0)) < 0 || -- 2.39.5