Commit c236f451 authored by Eduardo Otubo's avatar Eduardo Otubo
Browse files

seccomp: fine tuning whitelist by adding times() 

This was causing Qemu process to hang when using -sandbox on as
discribed on RHBZ: https://bugzilla.redhat.com/show_bug.cgi?id=1004175



Signed-off-by: default avatarEduardo Otubo <otubo@linux.vnet.ibm.com>
Tested-by: default avatarPaul Moore <pmoore@redhat.com>
Acked-by: default avatarPaul Moore <pmoore@redhat.com>
parent f828a4c8

qemu-seccomp.c

+1 −0
Original line number Diff line number Diff line
@@ -90,6 +90,7 @@ static const struct QemuSeccompSyscall seccomp_whitelist[] = { 
    { SCMP_SYS(getuid), 245 },

    { SCMP_SYS(geteuid), 245 },

    { SCMP_SYS(timer_create), 245 },

    { SCMP_SYS(times), 245 },

    { SCMP_SYS(exit), 245 },

    { SCMP_SYS(clock_gettime), 245 },

    { SCMP_SYS(time), 245 },