From: Lennart Poettering <lennart@poettering.net>
Date: Wed, 14 Nov 2018 18:53:49 +0000 (+0100)
Subject: seccomp: add some missing syscalls to filter sets
X-Git-Tag: v240~302^2~1
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=a05cfe230f7c65e1fb7e84453f308ad91af9c65f;p=thirdparty%2Fsystemd.git

seccomp: add some missing syscalls to filter sets
---

diff --git a/src/shared/seccomp-util.c b/src/shared/seccomp-util.c
index 54280f59169..e00001288da 100644
--- a/src/shared/seccomp-util.c
+++ b/src/shared/seccomp-util.c
@@ -308,6 +308,7 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
                 "io_cancel\0"
                 "io_destroy\0"
                 "io_getevents\0"
+                "io_pgetevents\0"
                 "io_setup\0"
                 "io_submit\0"
         },
@@ -619,7 +620,9 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
                 "bpf\0"
                 "capset\0"
                 "chroot\0"
+                "fanotify_init\0"
                 "nfsservctl\0"
+                "open_by_handle_at\0"
                 "pivot_root\0"
                 "quotactl\0"
                 "setdomainname\0"