beenull/moby
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

profiles: seccomp: allow clock_settime64 when CAP_SYS_TIME is added

Browse source 
Signed-off-by: Bastien Pascard <bpascard@hotmail.com>
This commit is contained in:
Bastien Pascard 2022-07-06 23:45:13 +02:00
parent d7f2e47224
commit 420142a886
2 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
profiles/seccomp/default.json
View file

@ -743,7 +743,8 @@
"names": [ "names": [
"settimeofday", "settimeofday",
"stime", "stime",
"clock_settime" "clock_settime",
"clock_settime64"
], ],
"action": "SCMP_ACT_ALLOW", "action": "SCMP_ACT_ALLOW",
"includes": { "includes": {

1
profiles/seccomp/default_linux.go
View file

@ -731,6 +731,7 @@ func DefaultProfile() *Seccomp {
"settimeofday", "settimeofday",
"stime", "stime",
"clock_settime", "clock_settime",
"clock_settime64",
}, },
Action: specs.ActAllow, Action: specs.ActAllow,
}, },