From 934b8712a57e324581a15ddb4f6c84cd67a5673e Mon Sep 17 00:00:00 2001 From: Miroslav Lichvar Date: Mon, 10 Feb 2020 11:57:17 +0100 Subject: [PATCH] sys_linux: allow getuid() in seccomp filter This will be needed by gnutls when loading certificates. --- sys_linux.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sys_linux.c b/sys_linux.c index d972a11..09b96a9 100644 --- a/sys_linux.c +++ b/sys_linux.c @@ -482,7 +482,7 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_SystemCallContext context) SCMP_SYS(gettimeofday), SCMP_SYS(settimeofday), SCMP_SYS(time), /* Process */ SCMP_SYS(clone), SCMP_SYS(exit), SCMP_SYS(exit_group), SCMP_SYS(getpid), - SCMP_SYS(getrlimit), SCMP_SYS(rt_sigaction), SCMP_SYS(rt_sigreturn), + SCMP_SYS(getrlimit), SCMP_SYS(getuid), SCMP_SYS(rt_sigaction), SCMP_SYS(rt_sigreturn), SCMP_SYS(rt_sigprocmask), SCMP_SYS(set_tid_address), SCMP_SYS(sigreturn), SCMP_SYS(wait4), SCMP_SYS(waitpid), /* Memory */