privsep: Allow newfstatat syscall as well

Allows newer glibc variants to work apparently.
As reported in #84 and #89.

diff --git a/src/privsep-linux.c b/src/privsep-linux.c
index 479a1d829411751f8e4cab9173fb0054562c1083..6327b1bc63444667cb3b0e6a0b6b8ec6bf57a90a 100644 (file)
--- a/src/privsep-linux.c
+++ b/src/privsep-linux.c
@@ -328,6 +328,9 @@ static struct sock_filter ps_seccomp_filter[] = {
 #ifdef __NR_nanosleep
        SECCOMP_ALLOW(__NR_nanosleep),  /* XXX should use ppoll instead */
 #endif
+#ifdef __NR_newfstatat
+       SECCOMP_ALLOW(__NR_newfstatat),
+#endif
 #ifdef __NR_ppoll
        SECCOMP_ALLOW(__NR_ppoll),
 #endif