diff options
| author | Tobias Berger <tobi.berger13@gmail.com> | 2022-02-13 13:45:13 +0100 |
|---|---|---|
| committer | omar-polo <op@omarpolo.com> | 2022-02-13 15:29:33 +0100 |
| commit | d0e0be1e43e6628e6215e1803c7a2415dd58c9bd (patch) | |
| tree | f82328f53676075b7819c353264223e003a2d699 /sandbox.c | |
| parent | c6ae2561a0345a7bd98652b66d7237d8bb88db5e (diff) | |
Allow Arch-Armv7 syscalls in sandbox.c
Diffstat (limited to 'sandbox.c')
| -rw-r--r-- | sandbox.c | 9 |
1 files changed, 9 insertions, 0 deletions
@@ -344,6 +344,9 @@ static struct sock_filter filter[] = { #ifdef __NR_newfstatat SC_ALLOW(newfstatat), #endif +#ifdef __NR_fstatat64 + SC_ALLOW(fstatat64), +#endif #ifdef __NR_oldfstat SC_ALLOW(oldfstat), #endif @@ -383,6 +386,12 @@ static struct sock_filter filter[] = { #ifdef __NR_writev SC_ALLOW(writev), #endif +#ifdef __NR__llseek + SC_ALLOW(_llseek), +#endif +#ifdef __NR_sigreturn + SC_ALLOW(sigreturn), +#endif /* disallow everything else */ BPF_STMT(BPF_RET | BPF_K, SC_FAIL), |