mirror of
https://github.com/openwrt/openwrt.git
synced 2025-01-09 14:33:00 +00:00
d28880cdd8
Now that ujail supports seccomp also on Aarch64, add missing syscall 'fstat' to the list of allowed syscalls. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
46 lines
663 B
JSON
46 lines
663 B
JSON
{
|
|
"defaultAction": "SCMP_ACT_KILL_PROCESS",
|
|
"syscalls": [
|
|
{
|
|
"names": [
|
|
"read",
|
|
"write",
|
|
"writev",
|
|
"open",
|
|
"close",
|
|
"time",
|
|
"brk",
|
|
"ioctl",
|
|
"uname",
|
|
"bind",
|
|
"connect",
|
|
"getsockname",
|
|
"recvmsg",
|
|
"recvfrom",
|
|
"sendmsg",
|
|
"sendto",
|
|
"setsockopt",
|
|
"socket",
|
|
"pipe",
|
|
"poll",
|
|
"fcntl64",
|
|
"fstat",
|
|
"epoll_create",
|
|
"epoll_create1",
|
|
"epoll_ctl",
|
|
"epoll_wait",
|
|
"epoll_pwait",
|
|
"rt_sigaction",
|
|
"sigreturn",
|
|
"rt_sigreturn",
|
|
"rt_sigprocmask",
|
|
"exit_group",
|
|
"exit",
|
|
"fcntl",
|
|
"clock_gettime"
|
|
],
|
|
"action": "SCMP_ACT_ALLOW"
|
|
}
|
|
]
|
|
}
|