diff --git a/contrib/seccomp/seccomp_default.go b/contrib/seccomp/seccomp_default.go index f1337e6db..dcf6a75e9 100644 --- a/contrib/seccomp/seccomp_default.go +++ b/contrib/seccomp/seccomp_default.go @@ -232,6 +232,8 @@ func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp { "openat", "openat2", "pause", + "pidfd_open", + "pidfd_send_signal", "pipe", "pipe2", "poll", @@ -571,6 +573,7 @@ func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp { s.Syscalls = append(s.Syscalls, specs.LinuxSyscall{ Names: []string{ "kcmp", + "pidfd_getfd", "process_vm_readv", "process_vm_writev", "ptrace",