diff options
| author | fanquake <fanquake@gmail.com> | 2021-10-05 08:41:41 +0800 |
|---|---|---|
| committer | fanquake <fanquake@gmail.com> | 2021-10-05 08:41:41 +0800 |
| commit | ee08741c9c6c6931c521f57d179532277dced546 (patch) | |
| tree | 034238dbd4a11b8282e67e771188f84b14cd60ff /src | |
| parent | 9e530c6352c3e3d4f2936bbbb1bcb34ff9ca6378 (diff) | |
sandbox: add newfstatat to allowed filesystem syscalls
Diffstat (limited to 'src')
| -rw-r--r-- | src/util/syscall_sandbox.cpp | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/util/syscall_sandbox.cpp b/src/util/syscall_sandbox.cpp index c4006cbd3c..83d69dd72d 100644 --- a/src/util/syscall_sandbox.cpp +++ b/src/util/syscall_sandbox.cpp @@ -545,6 +545,7 @@ public: allowed_syscalls.insert(__NR_fdatasync); // synchronize a file's in-core state with storage device allowed_syscalls.insert(__NR_flock); // apply or remove an advisory lock on an open file allowed_syscalls.insert(__NR_fstat); // get file status + allowed_syscalls.insert(__NR_newfstatat); // get file status allowed_syscalls.insert(__NR_fsync); // synchronize a file's in-core state with storage device allowed_syscalls.insert(__NR_ftruncate); // truncate a file to a specified length allowed_syscalls.insert(__NR_getcwd); // get current working directory |