From 2f8f95aad168adb9c35905176180c89930370148 Mon Sep 17 00:00:00 2001 From: Vincent Bernat Date: Thu, 16 Nov 2017 16:38:55 +0100 Subject: [PATCH] priv: also allow the use of openat for seccomp --- src/daemon/priv-seccomp.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/daemon/priv-seccomp.c b/src/daemon/priv-seccomp.c index 7d911bc0..fe48ad3e 100644 --- a/src/daemon/priv-seccomp.c +++ b/src/daemon/priv-seccomp.c @@ -148,6 +148,7 @@ priv_seccomp_init(int remote, int child) if ((rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(read), 0)) < 0 || (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(write), 0)) < 0 || /* write needed for */ (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(open), 0)) < 0 || + (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(openat), 0)) < 0 || (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(fcntl), 0)) < 0 || (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(kill), 0)) < 0 || (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(socket), 0)) < 0 || -- 2.39.5