[seccomp] Whitelist rseq syscall

Used by glibc 2.35 and later.
This commit is contained in:
dongresource 2022-11-15 02:30:20 +01:00
parent f126b88781
commit b1eea6d4fe

View File

@ -195,6 +195,9 @@ static sock_filter filter[] = {
ALLOW_SYSCALL(exit_group),
ALLOW_SYSCALL(rt_sigprocmask), // musl-libc
ALLOW_SYSCALL(clock_nanosleep), // gets called very rarely
#ifdef __NR_rseq
ALLOW_SYSCALL(rseq),
#endif
// to crash properly on SIGSEGV
DENY_SYSCALL_ERRNO(tgkill, EPERM),