privsep: Allow dup3 on Linux

It seems some libc will really call dup3 rather than dup2.
Another fix for #260.
This commit is contained in:
Roy Marples 2023-11-09 09:21:20 +00:00
parent 1064814667
commit 4bb0c8ff02

View File

@ -313,6 +313,9 @@ static struct sock_filter ps_seccomp_filter[] = {
#ifdef __NR_dup2
SECCOMP_ALLOW(__NR_dup2), // daemonising dups stderr to stdin(/dev/null)
#endif
#ifdef __NR_dup3
SECCOMP_ALLOW(__NR_dup3),
#endif
#ifdef __NR_epoll_ctl
SECCOMP_ALLOW(__NR_epoll_ctl),
#endif