seccomp: fine tuning whitelist by adding times()
This was causing Qemu process to hang when using -sandbox on as discribed on RHBZ: https://bugzilla.redhat.com/show_bug.cgi?id=1004175 Signed-off-by: Eduardo Otubo <otubo@linux.vnet.ibm.com> Tested-by: Paul Moore <pmoore@redhat.com> Acked-by: Paul Moore <pmoore@redhat.com>
This commit is contained in:
		
							parent
							
								
									f828a4c8fa
								
							
						
					
					
						commit
						c236f4519c
					
				| @ -90,6 +90,7 @@ static const struct QemuSeccompSyscall seccomp_whitelist[] = { | ||||
|     { SCMP_SYS(getuid), 245 }, | ||||
|     { SCMP_SYS(geteuid), 245 }, | ||||
|     { SCMP_SYS(timer_create), 245 }, | ||||
|     { SCMP_SYS(times), 245 }, | ||||
|     { SCMP_SYS(exit), 245 }, | ||||
|     { SCMP_SYS(clock_gettime), 245 }, | ||||
|     { SCMP_SYS(time), 245 }, | ||||
|  | ||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user
	 Eduardo Otubo
						Eduardo Otubo