Sebastiaan van Stijn 6f242f1a28 seccomp: add fchmodat2 syscall (kernel v6.6, libseccomp v2.5.5) ... Add this syscall to match the profile in containerd containerd: a6e52c74fa libseccomp: 53267af3fb kernel: 09da082b07 fs: Add fchmodat2() On the userspace side fchmodat(3) is implemented as a wrapper function which implements the POSIX-specified interface. This interface differs from the underlying kernel system call, which does not have a flags argument. Most implementations require procfs [1][2]. There doesn't appear to be a good userspace workaround for this issue but the implementation in the kernel is pretty straight-forward. The new fchmodat2() syscall allows to pass the AT_SYMLINK_NOFOLLOW flag, unlike existing fchmodat. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>		2024-02-06 13:59:04 +01:00
..
apparmor	pkg/aaparser: remove, and integrate into profiles/apparmor	2024-01-02 15:15:49 +01:00
seccomp	seccomp: add fchmodat2 syscall (kernel v6.6, libseccomp v2.5.5)	2024-02-06 13:59:04 +01:00