Quellcode durchsuchen

seccomp: add name_to_handle_at to allowlist

Based on the analysis on [the previous PR][1].

  [1]: https://github.com/moby/moby/pull/45766#pullrequestreview-1493908145

Signed-off-by: Bjorn Neergaard <bjorn.neergaard@docker.com>
(cherry picked from commit b335e3d305be86bd28089a057d8be6a346445549)
Resolved conflicts:
	profiles/seccomp/default_linux.go
Signed-off-by: Bjorn Neergaard <bjorn.neergaard@docker.com>
Bjorn Neergaard vor 2 Jahren
Ursprung
Commit
a480b37621
2 geänderte Dateien mit 2 neuen und 0 gelöschten Zeilen
  1. 1 0
      profiles/seccomp/default.json
  2. 1 0
      profiles/seccomp/default_linux.go

+ 1 - 0
profiles/seccomp/default.json

@@ -232,6 +232,7 @@
 				"munlock",
 				"munlock",
 				"munlockall",
 				"munlockall",
 				"munmap",
 				"munmap",
+				"name_to_handle_at",
 				"nanosleep",
 				"nanosleep",
 				"newfstatat",
 				"newfstatat",
 				"_newselect",
 				"_newselect",

+ 1 - 0
profiles/seccomp/default_linux.go

@@ -227,6 +227,7 @@ func DefaultProfile() *Seccomp {
 				"munlock",
 				"munlock",
 				"munlockall",
 				"munlockall",
 				"munmap",
 				"munmap",
+				"name_to_handle_at",
 				"nanosleep",
 				"nanosleep",
 				"newfstatat",
 				"newfstatat",
 				"_newselect",
 				"_newselect",