dasharo/systemd
0
0
Fork 0
mirror of https://github.com/Dasharo/systemd.git synced 2026-03-06 15:02:31 -08:00
Code Issues Packages Projects Releases Wiki Activity

seccomp-util: add cacheflush() syscall to @default syscall set

Browse Source 
This is like membarrier() I guess and basically just exposes CPU
functionality via kernel syscall on some archs. Let's whitelist it for
everyone.

Fixes: #17197
This commit is contained in:
Lennart Poettering
2020-09-29 15:59:28 +02:00
committed by Zbigniew Jędrzejewski-Szmek
parent 4796a4fba9
commit 8e24b1d23f
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
src/shared/seccomp-util.c
View File

@@ -272,6 +272,7 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
.name = "@default",
.help = "System calls that are always permitted",
.value =
"cacheflush\0"
"clock_getres\0"
"clock_getres_time64\0"
"clock_gettime\0"