seccomp: allow restart_syscall in stdin sandbox

6 years ago · 38cd570d28
parent cc828f582f
commit 38cd570d28
1 changed files with 3 additions and 0 deletions
--- a/src/xmppipe_sandbox_seccomp.c
+++ b/src/xmppipe_sandbox_seccomp.c
@ -373,6 +373,9 @@ xmppipe_sandbox_stdin(xmppipe_state_t *state)
 #ifdef __NR_write
        SC_ALLOW(write),
 #endif
+#ifdef __NR_restart_syscall
+        SC_ALLOW(restart_syscall),
+#endif

        /* Default deny */
        BPF_STMT(BPF_RET+BPF_K, SECCOMP_FILTER_FAIL)