From e16bcca61787788dd42fca6cbae9b87176e8a213 Mon Sep 17 00:00:00 2001 From: Miroslav Lichvar Date: Wed, 24 May 2023 10:56:07 +0200 Subject: [PATCH] sys_linux: allow membarrier in seccomp filter This system call is used by musl. Reported-by: jvoisin --- sys_linux.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/sys_linux.c b/sys_linux.c index 2a5eb8f..c6cb453 100644 --- a/sys_linux.c +++ b/sys_linux.c @@ -498,6 +498,9 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context) SCMP_SYS(getrlimit), SCMP_SYS(getuid), SCMP_SYS(getuid32), +#ifdef __NR_membarrier + SCMP_SYS(membarrier), +#endif #ifdef __NR_rseq SCMP_SYS(rseq), #endif