diff --git a/profiles/seccomp/default.json b/profiles/seccomp/default.json index c6d82f668b..0e260c72a6 100644 --- a/profiles/seccomp/default.json +++ b/profiles/seccomp/default.json @@ -780,7 +780,8 @@ "names": [ "get_mempolicy", "mbind", - "set_mempolicy" + "set_mempolicy", + "set_mempolicy_home_node" ], "action": "SCMP_ACT_ALLOW", "includes": { diff --git a/profiles/seccomp/default_linux.go b/profiles/seccomp/default_linux.go index d2f7d5653a..aef6a97dbb 100644 --- a/profiles/seccomp/default_linux.go +++ b/profiles/seccomp/default_linux.go @@ -768,6 +768,7 @@ func DefaultProfile() *Seccomp { "get_mempolicy", "mbind", "set_mempolicy", + "set_mempolicy_home_node", // kernel v5.17, libseccomp v2.5.4 }, Action: specs.ActAllow, },