edcc51cbee
Add pkey_alloc(2), pkey_free(2) and pkey_mprotect(2) in seccomp default profile.
pkey_alloc(2), pkey_free(2) and pkey_mprotect(2) can only configure
the calling process's own memory, so they are existing "safe for everyone" syscalls.
close issue: #43481
Signed-off-by: zhubojun <bojun.zhu@foxmail.com>
(cherry picked from commit
|
||
---|---|---|
.. | ||
fixtures | ||
default.json | ||
default_linux.go | ||
generate.go | ||
kernel_linux.go | ||
kernel_linux_test.go | ||
seccomp.go | ||
seccomp_linux.go | ||
seccomp_test.go |