added new syscall to strict sandbox

This commit is contained in:
valoq 2021-02-09 15:46:13 +01:00 committed by Sebastian Ramacher
parent 5ffd3d031c
commit f96451c985

View file

@ -186,6 +186,7 @@ seccomp_enable_strict_filter(void)
ALLOW_RULE(mprotect);
ALLOW_RULE(mremap);
ALLOW_RULE(munmap);
ALLOW_RULE(newfstatat);
/* ALLOW_RULE (open); specified below */
/* ALLOW_RULE (openat); specified below */
ALLOW_RULE(pipe);