]> git.ipfire.org Git - thirdparty/chrony.git/commitdiff
sys_linux: allow getrandom in seccomp filter
authorMiroslav Lichvar <mlichvar@redhat.com>
Tue, 25 Jul 2017 13:39:23 +0000 (15:39 +0200)
committerMiroslav Lichvar <mlichvar@redhat.com>
Tue, 25 Jul 2017 15:40:35 +0000 (17:40 +0200)
This fixes commit c5735ebfe9065facc324b58ea4f94a9ea64c41cf.

sys_linux.c

index f2f3eb91a3cf9e414d48c93a3a0090acb24a2cc6..2f84246e0d0303216d1e2dd79cb7cf9457283588 100644 (file)
@@ -490,7 +490,7 @@ SYS_Linux_EnableSystemCallFilter(int level)
     SCMP_SYS(poll), SCMP_SYS(read), SCMP_SYS(futex), SCMP_SYS(select),
     SCMP_SYS(set_robust_list), SCMP_SYS(write),
     /* Miscellaneous */
-    SCMP_SYS(sysinfo), SCMP_SYS(uname),
+    SCMP_SYS(getrandom), SCMP_SYS(sysinfo), SCMP_SYS(uname),
   };
 
   const int socket_domains[] = {