beenull/moby
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge pull request #45835 from neersighted/backport/45766/20.10

Browse source 
[20.10 backport] seccomp: always allow name_to_handle_at(2)
This commit is contained in:
Bjorn Neergaard 2023-06-28 10:36:49 -06:00 committed by GitHub
commit a3debeefd7
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
profiles/seccomp/default.json
View file

@ -232,6 +232,7 @@
"munlock",
"munlockall",
"munmap",
"name_to_handle_at",
"nanosleep",
"newfstatat",
"_newselect",
@ -607,7 +608,6 @@
"mount",
"mount_setattr",
"move_mount",
"name_to_handle_at",
"open_tree",
"perf_event_open",
"quotactl",

2
profiles/seccomp/default_linux.go
View file

@ -227,6 +227,7 @@ func DefaultProfile() *Seccomp {
"munlock",
"munlockall",
"munmap",
"name_to_handle_at",
"nanosleep",
"newfstatat",
"_newselect",
@ -540,7 +541,6 @@ func DefaultProfile() *Seccomp {
"mount",
"mount_setattr",
"move_mount",
"name_to_handle_at",
"open_tree",
"perf_event_open",
"quotactl",