privsep: Allow newfstatat syscall as well

Allows newer glibc variants to work apparently.
As reported in #84 and #89.

diff --git a/src/privsep-linux.c b/src/privsep-linux.c
index 4d5c195dd38c435499897bbfcf6f3cbdd2358179..66aeb49029e8a03b2b7cbf19b8ef000e78b55abf 100644 (file)
--- a/src/privsep-linux.c
+++ b/src/privsep-linux.c
@@ -353,6 +353,9 @@ static struct sock_filter ps_seccomp_filter[] = {
 #ifdef __NR_nanosleep
        SECCOMP_ALLOW(__NR_nanosleep),  /* XXX should use ppoll instead */
 #endif
+#ifdef __NR_newfstatat
+       SECCOMP_ALLOW(__NR_newfstatat),
+#endif
 #ifdef __NR_ppoll
        SECCOMP_ALLOW(__NR_ppoll),
 #endif