statzone

commit 856b77765c36febb8a599e302335d584df37c919
parent c63194b913fe9809e01e6f008c03af5d56ef92c5
Author: Frederic Cambus <fred@statdns.com>
Date:   Tue,  9 Jun 2020 21:57:11 +0200

Allow the openat and write syscalls, they are used on glibc systems.

Diffstat:
M
src/seccomp.h
 | 
6
+++---

1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/src/seccomp.h b/src/seccomp.h
@@ -4,7 +4,7 @@
  * https://www.statdns.com
  *
  * Created: 2012-02-13
- * Last Updated: 2019-10-26
+ * Last Updated: 2020-06-09
  *
  * StatZone is released under the BSD 2-Clause license
  * See LICENSE file for details.
@@ -35,10 +35,10 @@ static struct sock_filter filter[] = {
 	STATZONE_SYSCALL_ALLOW(ioctl),
 #if defined(SYS_open)
 	STATZONE_SYSCALL_ALLOW(open),
-#else
-	STATZONE_SYSCALL_ALLOW(openat),
 #endif
+	STATZONE_SYSCALL_ALLOW(openat),
 	STATZONE_SYSCALL_ALLOW(read),
+	STATZONE_SYSCALL_ALLOW(write),
 	STATZONE_SYSCALL_ALLOW(writev),
 
 	BPF_STMT(BPF_RET+BPF_K, SECCOMP_RET_KILL)