commit 60bc618c3feaf80dff54dec501447d9417278ab0
parent 19573a7bf004fe452e7b3b44174560380a4bbefb
Author: Frederic Cambus <fred@statdns.com>
Date: Mon, 14 Sep 2020 15:51:18 +0200
Allow the clock_nanosleep syscall, it is required for kore_accesslog().
glibc 2.31 calls clock_nanosleep in its nanosleep function.
Diffstat:
1 file changed, 1 insertion(+), 0 deletions(-)
diff --git a/src/seccomp.c b/src/seccomp.c
@@ -87,6 +87,7 @@ static struct sock_filter filter_kore[] = {
KORE_SYSCALL_ALLOW(geteuid),
KORE_SYSCALL_ALLOW(exit_group),
KORE_SYSCALL_ALLOW(nanosleep),
+ KORE_SYSCALL_ALLOW(clock_nanosleep),
/* Memory related. */
KORE_SYSCALL_ALLOW(brk),