summaryrefslogtreecommitdiff
path: root/src/shared/seccomp-util.c
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2018-11-14 19:53:49 +0100
committerLennart Poettering <lennart@poettering.net>2018-11-16 16:10:57 +0100
commita05cfe230f7c65e1fb7e84453f308ad91af9c65f (patch)
tree64584240087801c24de9e537d2cd889c5e723499 /src/shared/seccomp-util.c
parentcdf6258c2ee414b38b4a6f63a635acbe709ac524 (diff)
downloadsystemd-a05cfe230f7c65e1fb7e84453f308ad91af9c65f.tar.gz
seccomp: add some missing syscalls to filter sets
Diffstat (limited to 'src/shared/seccomp-util.c')
-rw-r--r--src/shared/seccomp-util.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/src/shared/seccomp-util.c b/src/shared/seccomp-util.c
index 54280f5916..e00001288d 100644
--- a/src/shared/seccomp-util.c
+++ b/src/shared/seccomp-util.c
@@ -308,6 +308,7 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
"io_cancel\0"
"io_destroy\0"
"io_getevents\0"
+ "io_pgetevents\0"
"io_setup\0"
"io_submit\0"
},
@@ -619,7 +620,9 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
"bpf\0"
"capset\0"
"chroot\0"
+ "fanotify_init\0"
"nfsservctl\0"
+ "open_by_handle_at\0"
"pivot_root\0"
"quotactl\0"
"setdomainname\0"