privsep: Allow getrandom sysctl for newer glibc

Fixes #120

diff --git a/src/privsep-linux.c b/src/privsep-linux.c
index b238644b7c7be6ac55bb5e822c3536e552d4d780..479a1d829411751f8e4cab9173fb0054562c1083 100644 (file)
--- a/src/privsep-linux.c
+++ b/src/privsep-linux.c
@@ -300,6 +300,9 @@ static struct sock_filter ps_seccomp_filter[] = {
 #ifdef __NR_getpid
        SECCOMP_ALLOW(__NR_getpid),
 #endif
+#ifdef __NR_getrandom
+       SECCOMP_ALLOW(__NR_getrandom),
+#endif
 #ifdef __NR_getsockopt
        /* For route socket overflow */
        SECCOMP_ALLOW_ARG(__NR_getsockopt, 1, SOL_SOCKET),