seccomp: allowlist close_range() by default in @basic-io

diff --git a/src/shared/seccomp-util.c b/src/shared/seccomp-util.c
index 75ff2bb7bf4542791acb8a6f44dcc1b350d17b4b..4a541111f96fab5950a18ff254c2653964d5226f 100644 (file)
--- a/src/shared/seccomp-util.c
+++ b/src/shared/seccomp-util.c
@@ -345,6 +345,7 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
                 .value =
                 "_llseek\0"
                 "close\0"
+                "close_range\0"
                 "dup\0"
                 "dup2\0"
                 "dup3\0"