From 0efde2bfbde2fea78134a32f5fb34332ec0ce531 Mon Sep 17 00:00:00 2001 From: Michael Pratt Date: Wed, 12 Sep 2018 10:50:22 -0700 Subject: [PATCH] Remove getdents from filters It was only used by whitelistfs, which was removed in bc81f3fe4a042a15343d2eab44da32d818ac1ade. PiperOrigin-RevId: 212666374 Change-Id: Ia35e6dc9d68c1a3b015d5b5f71ea3e68e46c5bed --- runsc/boot/filter/config.go | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/runsc/boot/filter/config.go b/runsc/boot/filter/config.go index 1a0c426ab..0bcc640d5 100644 --- a/runsc/boot/filter/config.go +++ b/runsc/boot/filter/config.go @@ -98,9 +98,8 @@ var allowedSyscalls = seccomp.SyscallRules{ seccomp.AllowValue(0), }, }, - syscall.SYS_GETDENTS64: {}, - syscall.SYS_GETPID: {}, - unix.SYS_GETRANDOM: {}, + syscall.SYS_GETPID: {}, + unix.SYS_GETRANDOM: {}, syscall.SYS_GETSOCKOPT: []seccomp.Rule{ { seccomp.AllowAny{},