fix: flock filter update

diff --git a/src/common/sandbox.c b/src/common/sandbox.c
index 87c8946bc19735c5a8caa6583ac784be8c82b226..7ff0fb0afa3e52ee73d5154d73276b0662484754 100644 (file)
--- a/src/common/sandbox.c
+++ b/src/common/sandbox.c
@@ -531,6 +531,11 @@ sb_flock(scmp_filter_ctx ctx, sandbox_cfg_t *filter)
   if (rc)
     return rc;
 
+  rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(flock), 1,
+      SCMP_CMP(1, SCMP_CMP_EQ, LOCK_UN));
+  if (rc)
+    return rc;
+
   return 0;
 }