seccomp: fine tuning whitelist by adding times()
This was causing Qemu process to hang when using -sandbox on as discribed on RHBZ: https://bugzilla.redhat.com/show_bug.cgi?id=1004175 Signed-off-by: Eduardo Otubo <otubo@linux.vnet.ibm.com> Tested-by: Paul Moore <pmoore@redhat.com> Acked-by: Paul Moore <pmoore@redhat.com>
This commit is contained in:
		
							parent
							
								
									f828a4c8fa
								
							
						
					
					
						commit
						c236f4519c
					
				| 
						 | 
				
			
			@ -90,6 +90,7 @@ static const struct QemuSeccompSyscall seccomp_whitelist[] = {
 | 
			
		|||
    { SCMP_SYS(getuid), 245 },
 | 
			
		||||
    { SCMP_SYS(geteuid), 245 },
 | 
			
		||||
    { SCMP_SYS(timer_create), 245 },
 | 
			
		||||
    { SCMP_SYS(times), 245 },
 | 
			
		||||
    { SCMP_SYS(exit), 245 },
 | 
			
		||||
    { SCMP_SYS(clock_gettime), 245 },
 | 
			
		||||
    { SCMP_SYS(time), 245 },
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
		Loading…
	
		Reference in New Issue