privsep: Allow dup2 with SECCOMP

diff --git a/src/privsep-linux.c b/src/privsep-linux.c
index b748abcdd5f96fb0ec563f96d09bcb33eb895741..1192eb6c23fba5b5c16c4448dcd82f3ae667d29c 100644 (file)
--- a/src/privsep-linux.c
+++ b/src/privsep-linux.c
@@ -310,6 +310,9 @@ static struct sock_filter ps_seccomp_filter[] = {
 #ifdef __NR_close
        SECCOMP_ALLOW(__NR_close),
 #endif
+#ifdef __NR_dup2
+       SECCOMP_ALLOW(__NR_dup2), // daemonising dups stderr to stdin(/dev/null)
+#endif
 #ifdef __NR_epoll_ctl
        SECCOMP_ALLOW(__NR_epoll_ctl),
 #endif