github/containerd
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity

Merge pull request #8752 from neersighted/name_to_handle_at

Browse Source 
seccomp: always allow name_to_handle_at
This commit is contained in:
Kazuyoshi Kato 2023-06-28 07:58:07 -07:00 committed by GitHub
commit a3c9ed7092
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
contrib/seccomp/seccomp_default.go
View File

@ -237,6 +237,7 @@ func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp {
"munlock", "munlock",
"munlockall", "munlockall",
"munmap", "munmap",
"name_to_handle_at",
"nanosleep", "nanosleep",
"newfstatat", "newfstatat",
"_newselect", "_newselect",
@ -585,7 +586,6 @@ func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp {
"mount", "mount",
"mount_setattr", "mount_setattr",
"move_mount", "move_mount",
"name_to_handle_at",
"open_tree", "open_tree",
"perf_event_open", "perf_event_open",
"quotactl", "quotactl",