privsep: Allow newfstatat syscall as well

Allows newer glibc variants to work apparently.
As reported in #84 and #89.
This commit is contained in:
Roy Marples 2022-08-26 09:24:50 +01:00
parent 645c32dd1a
commit 38befd4e86

View File

@ -353,6 +353,9 @@ static struct sock_filter ps_seccomp_filter[] = {
#ifdef __NR_nanosleep
SECCOMP_ALLOW(__NR_nanosleep), /* XXX should use ppoll instead */
#endif
#ifdef __NR_newfstatat
SECCOMP_ALLOW(__NR_newfstatat),
#endif
#ifdef __NR_ppoll
SECCOMP_ALLOW(__NR_ppoll),
#endif