diff options
-rw-r--r-- | seccomp/arm/9p_device.policy | 1 | ||||
-rw-r--r-- | seccomp/arm/9s.policy | 1 | ||||
-rw-r--r-- | seccomp/x86_64/9p_device.policy | 1 | ||||
-rw-r--r-- | seccomp/x86_64/9s.policy | 1 | ||||
-rw-r--r-- | seccomp/x86_64/gpu_device.policy | 1 | ||||
-rw-r--r-- | tests/plugin.policy | 1 |
6 files changed, 6 insertions, 0 deletions
diff --git a/seccomp/arm/9p_device.policy b/seccomp/arm/9p_device.policy index 52df2f0..feff21d 100644 --- a/seccomp/arm/9p_device.policy +++ b/seccomp/arm/9p_device.policy @@ -13,6 +13,7 @@ stat64: 1 close: 1 prctl: arg0 == PR_SET_NAME open: 1 +openat: 1 fstat64: 1 # ioctl(fd, FIOCLEX, 0) is equivalent to fcntl(fd, F_SETFD, FD_CLOEXEC). ioctl: arg1 == FIOCLEX diff --git a/seccomp/arm/9s.policy b/seccomp/arm/9s.policy index 494e683..153cf93 100644 --- a/seccomp/arm/9s.policy +++ b/seccomp/arm/9s.policy @@ -6,6 +6,7 @@ read: 1 write: 1 stat64: 1 open: 1 +openat: 1 close: 1 fstat64: 1 lstat64: 1 diff --git a/seccomp/x86_64/9p_device.policy b/seccomp/x86_64/9p_device.policy index 6a9d64a..f86d7b3 100644 --- a/seccomp/x86_64/9p_device.policy +++ b/seccomp/x86_64/9p_device.policy @@ -12,6 +12,7 @@ stat: 1 lstat: 1 close: 1 open: 1 +openat: 1 fstat: 1 # ioctl(fd, FIOCLEX, 0) is equivalent to fcntl(fd, F_SETFD, FD_CLOEXEC). ioctl: arg1 == FIOCLEX diff --git a/seccomp/x86_64/9s.policy b/seccomp/x86_64/9s.policy index 22600bf..400cca3 100644 --- a/seccomp/x86_64/9s.policy +++ b/seccomp/x86_64/9s.policy @@ -7,6 +7,7 @@ write: 1 lstat: 1 stat: 1 open: 1 +openat: 1 close: 1 fstat: 1 getdents: 1 diff --git a/seccomp/x86_64/gpu_device.policy b/seccomp/x86_64/gpu_device.policy index de16d39..691060a 100644 --- a/seccomp/x86_64/gpu_device.policy +++ b/seccomp/x86_64/gpu_device.policy @@ -3,6 +3,7 @@ # found in the LICENSE file. open: 1 +openat: 1 close: 1 sigaltstack: 1 munmap: 1 diff --git a/tests/plugin.policy b/tests/plugin.policy index 773ea24..460515d 100644 --- a/tests/plugin.policy +++ b/tests/plugin.policy @@ -39,6 +39,7 @@ madvise: 1 memfd_create: 1 mmap: 1 open: 1 +openat: 1 recvmsg: 1 restart_syscall: 1 rt_sigaction: 1 |