github/containerd
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity

seccomp: allow clock_settime64 when CAP_SYS_TIME is added

Browse Source 
Port moby/moby PR 43775

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
This commit is contained in:
Akihiro Suda
2022-07-11 10:04:13 +09:00
parent 681aaf68b7
commit 575095fcd6
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
contrib/seccomp/seccomp_default.go
View File

@@ -641,6 +641,7 @@ func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp {
"settimeofday",
"stime",
"clock_settime",
"clock_settime64",
},
Action: specs.ActAllow,
Args: []specs.LinuxSeccompArg{},