Merge pull request #43199 from Xyene/allow-landlock

seccomp: add support for Landlock syscalls in default policy
This commit is contained in:
Sebastiaan van Stijn
2022-05-13 10:18:45 +02:00
committed by GitHub
2 changed files with 6 additions and 0 deletions

View File

@@ -183,6 +183,9 @@
"io_uring_setup",
"ipc",
"kill",
"landlock_add_rule",
"landlock_create_ruleset",
"landlock_restrict_self",
"lchown",
"lchown32",
"lgetxattr",

View File

@@ -175,6 +175,9 @@ func DefaultProfile() *Seccomp {
"io_uring_setup",
"ipc",
"kill",
"landlock_add_rule",
"landlock_create_ruleset",
"landlock_restrict_self",
"lchown",
"lchown32",
"lgetxattr",