seccomp: allowlist close_range() by default in @basic-io

2025-02-09 09:57:26 +03:00 · 2020-10-14 09:40:37 +02:00 · 2020-10-14 09:40:37 +02:00 · 6ea0d25c57
commit 6ea0d25c57
parent 562b01e996
1 changed files with 1 additions and 0 deletions
--- a/src/shared/seccomp-util.c
+++ b/src/shared/seccomp-util.c
@ -345,6 +345,7 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
                .value =
                "_llseek\0"
                "close\0"
+                "close_range\0"
                "dup\0"
                "dup2\0"
                "dup3\0"