From: Miroslav Lichvar <mlichvar@redhat.com>
Date: Wed, 24 May 2023 08:56:07 +0000 (+0200)
Subject: sys_linux: allow membarrier in seccomp filter
X-Git-Tag: 4.4-pre2~22
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e16bcca61787788dd42fca6cbae9b87176e8a213;p=thirdparty%2Fchrony.git

sys_linux: allow membarrier in seccomp filter

This system call is used by musl.

Reported-by: jvoisin <julien.voisin@dustri.org>
---

diff --git a/sys_linux.c b/sys_linux.c
index 2a5eb8ff..c6cb4537 100644
--- a/sys_linux.c
+++ b/sys_linux.c
@@ -498,6 +498,9 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context)
     SCMP_SYS(getrlimit),
     SCMP_SYS(getuid),
     SCMP_SYS(getuid32),
+#ifdef __NR_membarrier
+    SCMP_SYS(membarrier),
+#endif
 #ifdef __NR_rseq
     SCMP_SYS(rseq),
 #endif