From 0ea4b1a5e0e9c35d960145d25166e92a9990227f Mon Sep 17 00:00:00 2001 From: Antonio Quartulli Date: Sun, 9 Jan 2022 15:24:55 +0100 Subject: [PATCH] linux: add access syscall to seccomp rules Signed-off-by: Antonio Quartulli --- src/daemon/priv-seccomp.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/daemon/priv-seccomp.c b/src/daemon/priv-seccomp.c index 5608c5f0..32097d31 100644 --- a/src/daemon/priv-seccomp.c +++ b/src/daemon/priv-seccomp.c @@ -178,6 +178,7 @@ priv_seccomp_init(int remote, int child) (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(gettimeofday), 0)) < 0 || (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(newfstatat), 0)) < 0 || (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(pread64), 0)) < 0 || + (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(access), 0)) < 0 || /* The following are for resolving addresses */ (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(mmap), 0)) < 0 || (rc = seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(munmap), 0)) < 0 || -- 2.47.2