linux: Allow the __NR_rt_sigprocmask syscall

Fixes recent glibc changes to getrandom() used by arc4random().
Fixes #421.

diff --git a/src/privsep-linux.c b/src/privsep-linux.c
index 8357904c9c9a6522ba3dde4daaf0ede929e854c9..e3485a2efdfcc7940452a29578b9e77696e7fef2 100644 (file)
--- a/src/privsep-linux.c
+++ b/src/privsep-linux.c
@@ -409,6 +409,9 @@ static struct sock_filter ps_seccomp_filter[] = {
 #ifdef __NR_recvmsg
        SECCOMP_ALLOW(__NR_recvmsg),
 #endif
+#ifdef __NR_rt_sigprocmask
+       SECCOMP_ALLOW(__NR_rt_sigprocmask),
+#endif
 #ifdef __NR_rt_sigreturn
        SECCOMP_ALLOW(__NR_rt_sigreturn),
 #endif