profiles: seccomp: allow clock_settime when CAP_SYS_TIME is added

Signed-off-by: Antonio Murdaca <runcom@redhat.com> (cherry picked from commit 3ab4961032)
2017-03-20 11:00:34 +01:00 · 2017-03-20 11:00:34 +01:00 · adbb5b4d39
commit adbb5b4d39
parent 9ef54c654b
2 changed files with 3 additions and 1 deletions
--- a/profiles/seccomp/default.json
+++ b/profiles/seccomp/default.json
@ -898,7 +898,8 @@
 			"names": [
 				"settimeofday",
 				"stime",
-				"adjtimex"
+				"adjtimex",
+				"clock_settime"
 			],
 			"action": "SCMP_ACT_ALLOW",
 			"args": [],
--- a/profiles/seccomp/seccomp_default.go
+++ b/profiles/seccomp/seccomp_default.go
@ -733,6 +733,7 @@ func DefaultProfile() *types.Seccomp {
 				"settimeofday",
 				"stime",
 				"adjtimex",
+				"clock_settime",
 			},
 			Action: types.ActAllow,
 			Args:   []*types.Arg{},