diff --git a/profiles/seccomp/default.json b/profiles/seccomp/default.json index cf785ef2c0..f1603eab13 100644 --- a/profiles/seccomp/default.json +++ b/profiles/seccomp/default.json @@ -783,7 +783,8 @@ "names": [ "get_mempolicy", "mbind", - "set_mempolicy" + "set_mempolicy", + "set_mempolicy_home_node" ], "action": "SCMP_ACT_ALLOW", "includes": { diff --git a/profiles/seccomp/default_linux.go b/profiles/seccomp/default_linux.go index c9ee041677..7edca88e0a 100644 --- a/profiles/seccomp/default_linux.go +++ b/profiles/seccomp/default_linux.go @@ -771,6 +771,7 @@ func DefaultProfile() *Seccomp { "get_mempolicy", "mbind", "set_mempolicy", + "set_mempolicy_home_node", // kernel v5.17, libseccomp v2.5.4 }, Action: specs.ActAllow, },