diff options
author | Lennart Poettering <lennart@poettering.net> | 2018-11-14 19:53:49 +0100 |
---|---|---|
committer | Lennart Poettering <lennart@poettering.net> | 2018-11-16 16:10:57 +0100 |
commit | a05cfe230f7c65e1fb7e84453f308ad91af9c65f (patch) | |
tree | 64584240087801c24de9e537d2cd889c5e723499 /src/shared/seccomp-util.c | |
parent | cdf6258c2ee414b38b4a6f63a635acbe709ac524 (diff) | |
download | systemd-a05cfe230f7c65e1fb7e84453f308ad91af9c65f.tar.gz |
seccomp: add some missing syscalls to filter sets
Diffstat (limited to 'src/shared/seccomp-util.c')
-rw-r--r-- | src/shared/seccomp-util.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/shared/seccomp-util.c b/src/shared/seccomp-util.c index 54280f5916..e00001288d 100644 --- a/src/shared/seccomp-util.c +++ b/src/shared/seccomp-util.c @@ -308,6 +308,7 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = { "io_cancel\0" "io_destroy\0" "io_getevents\0" + "io_pgetevents\0" "io_setup\0" "io_submit\0" }, @@ -619,7 +620,9 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = { "bpf\0" "capset\0" "chroot\0" + "fanotify_init\0" "nfsservctl\0" + "open_by_handle_at\0" "pivot_root\0" "quotactl\0" "setdomainname\0" |