add futex(2) syscall to seccomp sandbox

Apparently needed for some glibc/openssl combinations.

Patch from Arkadiusz Miśkiewicz
This commit is contained in:
Damien Miller 2018-09-15 19:37:48 +10:00
parent 4488ae1a69
commit 149519b9f2

View File

@ -166,6 +166,9 @@ static const struct sock_filter preauth_insns[] = {
#ifdef __NR_exit_group
SC_ALLOW(__NR_exit_group),
#endif
#ifdef __NR_futex
SC_ALLOW(__NR_futex),
#endif
#ifdef __NR_geteuid
SC_ALLOW(__NR_geteuid),
#endif