From 1058471d59dfb3ca740dcf750fd01d9e6d331737 Mon Sep 17 00:00:00 2001 From: jf Date: Fri, 24 Feb 2023 16:38:29 +0100 Subject: allow vfork in seccomp --- config/seccomp.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'config') diff --git a/config/seccomp.json b/config/seccomp.json index 3c07a24..6c16583 100644 --- a/config/seccomp.json +++ b/config/seccomp.json @@ -1 +1 @@ -{"defaultAction":"SCMP_ACT_ERRNO","syscalls":[{"names":["accept4","access","arch_prctl","bind","brk","capget","capset","chdir","chmod","clone","close","connect","dup","dup2","epoll_create","epoll_ctl","epoll_pwait","epoll_wait","eventfd2","execve","exit_group","fchown","fcntl","fstat","fstatfs","futex","getcwd","getdents64","getegid","geteuid","getgid","getpid","getppid","getrandom","getsockname","getsockopt","gettid","getuid","ioctl","kill","listen","lseek","lstat","mkdir","mmap","mprotect","mremap","munmap","nanosleep","newfstatat","openat","pipe2","poll","prctl","pread64","prlimit64","pwrite64","read","readlink","readv","recvfrom","recvmsg","rename","rmdir","rt_sigaction","rt_sigprocmask","rt_sigreturn","rt_sigsuspend","seccomp","sendfile","sendmsg","set_robust_list","set_tid_address","setgid","setgroups","setsid","setsockopt","setuid","sigaltstack","socket","socketpair","stat","statfs","sysinfo","tgkill","umask","uname","unlink","unlinkat","wait4","write","writev"],"action":"SCMP_ACT_ALLOW","args":[],"comment":"","includes":{},"excludes":{}},{"names":["ftruncate","pwritev","sched_yield"],"action":"SCMP_ACT_ALLOW","args":[],"comment":"","includes":{},"excludes":{}}]} \ No newline at end of file +{"defaultAction":"SCMP_ACT_ERRNO","syscalls":[{"names":["accept4", "access","arch_prctl","bind","brk","capget","capset","chdir","chmod","clone","close","connect","dup","dup2","epoll_create","epoll_ctl","epoll_pwait","epoll_wait","eventfd2","execve","exit_group","fchown","fcntl","fstat","fstatfs","futex","getcwd","getdents64","getegid","geteuid","getgid","getpid","getppid","getrandom","getsockname","getsockopt","gettid","getuid","ioctl","kill","listen","lseek","lstat","mkdir","mmap","mprotect","mremap","munmap","nanosleep","newfstatat","openat","pipe2","poll","prctl","pread64","prlimit64","pwrite64","read","readlink","readv","recvfrom","recvmsg","rename","rmdir","rt_sigaction","rt_sigprocmask","rt_sigreturn","rt_sigsuspend","seccomp","sendfile","sendmsg","set_robust_list","set_tid_address","setgid","setgroups","setsid","setsockopt","setuid","sigaltstack","socket","socketpair","stat","statfs","sysinfo","tgkill","umask","uname","unlink","unlinkat","vfork","wait4","write","writev"],"action":"SCMP_ACT_ALLOW","args":[],"comment":"","includes":{},"excludes":{}},{"names":["ftruncate","pwritev","sched_yield"],"action":"SCMP_ACT_ALLOW","args":[],"comment":"","includes":{},"excludes":{}}]} \ No newline at end of file -- cgit v1.3