commit 856b77765c36febb8a599e302335d584df37c919
parent c63194b913fe9809e01e6f008c03af5d56ef92c5
Author: Frederic Cambus <fred@statdns.com>
Date: Tue, 9 Jun 2020 21:57:11 +0200
Allow the openat and write syscalls, they are used on glibc systems.
Diffstat:
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/src/seccomp.h b/src/seccomp.h
@@ -4,7 +4,7 @@
* https://www.statdns.com
*
* Created: 2012-02-13
- * Last Updated: 2019-10-26
+ * Last Updated: 2020-06-09
*
* StatZone is released under the BSD 2-Clause license
* See LICENSE file for details.
@@ -35,10 +35,10 @@ static struct sock_filter filter[] = {
STATZONE_SYSCALL_ALLOW(ioctl),
#if defined(SYS_open)
STATZONE_SYSCALL_ALLOW(open),
-#else
- STATZONE_SYSCALL_ALLOW(openat),
#endif
+ STATZONE_SYSCALL_ALLOW(openat),
STATZONE_SYSCALL_ALLOW(read),
+ STATZONE_SYSCALL_ALLOW(write),
STATZONE_SYSCALL_ALLOW(writev),
BPF_STMT(BPF_RET+BPF_K, SECCOMP_RET_KILL)