privsep: Allow __NR_mmap for seccomp

Some malloc implementations might use it rather than brk.

diff --git a/src/privsep-linux.c b/src/privsep-linux.c
index 3f0cb123f5773feccd48ac8d3b949f8c5e1b80f7..789c9d80b3e06a8db54f8e904960b404e7b1482a 100644 (file)
--- a/src/privsep-linux.c
+++ b/src/privsep-linux.c
@@ -238,6 +238,9 @@ static struct sock_filter ps_seccomp_filter[] = {
        /* SECCOMP BPF is newer than nl80211 so we don't need SIOCGIWESSID
         * which lives in the impossible to include linux/wireless.h header */
 #endif
+#ifdef __NR_mmap
+       SECCOMP_ALLOW(__NR_mmap),
+#endif
 #ifdef __NR_munmap
        SECCOMP_ALLOW(__NR_munmap),
 #endif