From: Lennart Poettering <lennart@poettering.net>
Date: Wed, 14 Oct 2020 07:40:37 +0000 (+0200)
Subject: seccomp: allowlist close_range() by default in @basic-io
X-Git-Tag: v247-rc1~79^2~4
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=6ea0d25c573c6ef64f62333b7e850067a202c7ee;p=thirdparty%2Fsystemd.git

seccomp: allowlist close_range() by default in @basic-io
---

diff --git a/src/shared/seccomp-util.c b/src/shared/seccomp-util.c
index 75ff2bb7bf4..4a541111f96 100644
--- a/src/shared/seccomp-util.c
+++ b/src/shared/seccomp-util.c
@@ -345,6 +345,7 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
                 .value =
                 "_llseek\0"
                 "close\0"
+                "close_range\0"
                 "dup\0"
                 "dup2\0"
                 "dup3\0"