From c4035940e7ed844a80280b2fed95a4245b228136 Mon Sep 17 00:00:00 2001 From: valoq Date: Sat, 12 Feb 2022 05:52:34 +0100 Subject: [PATCH] add syscall for strict sandbox --- zathura/seccomp-filters.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/zathura/seccomp-filters.c b/zathura/seccomp-filters.c index 6757198..d5ef257 100644 --- a/zathura/seccomp-filters.c +++ b/zathura/seccomp-filters.c @@ -149,6 +149,8 @@ seccomp_enable_strict_filter(void) ALLOW_RULE(eventfd2); ALLOW_RULE(exit); ALLOW_RULE(exit_group); + ALLOW_RULE(epoll_create); + ALLOW_RULE(epoll_ctl); ALLOW_RULE(fadvise64); ALLOW_RULE(fallocate); ALLOW_RULE(fcntl); /* TODO: build detailed filter */