Add i386 specific modify_ldt syscall to default seccomp filter
This syscall is used by Go on i386 binaries, although not by libc. Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
This commit is contained in:
parent
7058495ab8
commit
13a9d4e899
1 changed files with 6 additions and 0 deletions
|
@ -1564,5 +1564,11 @@ var defaultSeccompProfile = &configs.Seccomp{
|
|||
Action: configs.Allow,
|
||||
Args: []*configs.Arg{},
|
||||
},
|
||||
// i386 specific syscalls
|
||||
{
|
||||
Name: "modify_ldt",
|
||||
Action: configs.Allow,
|
||||
Args: []*configs.Arg{},
|
||||
},
|
||||
},
|
||||
}
|
||||
|
|
Loading…
Reference in a new issue