seccomp: move bdflush() system call to @obsolete filter group

The system call is obsolete after all.

diff --git a/src/shared/seccomp-util.c b/src/shared/seccomp-util.c
index 3c0dafe41ec95c6b9e88dd685301d928fd1289f3..5972d8e3e079992fb518a1e46b9de1711b6c0001 100644 (file)
--- a/src/shared/seccomp-util.c
+++ b/src/shared/seccomp-util.c
@@ -469,6 +469,7 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
                 .value =
                 "_sysctl\0"
                 "afs_syscall\0"
+                "bdflush\0"
                 "break\0"
                 "create_module\0"
                 "ftime\0"
@@ -500,7 +501,6 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
                 "@module\0"
                 "@raw-io\0"
                 "acct\0"
-                "bdflush\0"
                 "bpf\0"
                 "capset\0"
                 "chown32\0"