add syscall for strict sandbox

This commit is contained in:
valoq 2022-02-12 05:52:34 +01:00
parent 35e41f94aa
commit c4035940e7

View file

@ -149,6 +149,8 @@ seccomp_enable_strict_filter(void)
ALLOW_RULE(eventfd2);
ALLOW_RULE(exit);
ALLOW_RULE(exit_group);
ALLOW_RULE(epoll_create);
ALLOW_RULE(epoll_ctl);
ALLOW_RULE(fadvise64);
ALLOW_RULE(fallocate);
ALLOW_RULE(fcntl); /* TODO: build detailed filter */