Merge branch 'maint-0.4.6'

This commit is contained in:
David Goulet 2022-03-28 09:45:16 -04:00
commit 62fb184979
2 changed files with 6 additions and 0 deletions

3
changes/clone3-sandbox Normal file
View File

@ -0,0 +1,3 @@
o Minor features (linux seccomp2 sandbox):
- Permit the clone3 syscall, which is apparently used in glibc-2.34 and
later. Closes ticket 40590.

View File

@ -160,6 +160,9 @@ static int filter_nopar_gen[] = {
SCMP_SYS(close), SCMP_SYS(close),
SCMP_SYS(clone), SCMP_SYS(clone),
SCMP_SYS(dup), SCMP_SYS(dup),
#ifdef __NR_clone3
SCMP_SYS(clone3),
#endif
SCMP_SYS(epoll_create), SCMP_SYS(epoll_create),
SCMP_SYS(epoll_wait), SCMP_SYS(epoll_wait),
#ifdef __NR_epoll_pwait #ifdef __NR_epoll_pwait