summary refs log tree commit diff
path: root/seccomp/x86_64/rng_device.policy
diff options
context:
space:
mode:
Diffstat (limited to 'seccomp/x86_64/rng_device.policy')
-rw-r--r--seccomp/x86_64/rng_device.policy3
1 files changed, 2 insertions, 1 deletions
diff --git a/seccomp/x86_64/rng_device.policy b/seccomp/x86_64/rng_device.policy
index a5e5bf7..429e94d 100644
--- a/seccomp/x86_64/rng_device.policy
+++ b/seccomp/x86_64/rng_device.policy
@@ -3,6 +3,8 @@
 # found in the LICENSE file.
 
 close: 1
+dup: 1
+dup2: 1
 exit_group: 1
 futex: 1
 # Disallow mmap with PROT_EXEC set.  The syntax here doesn't allow bit
@@ -19,6 +21,5 @@ sigaltstack: 1
 clone: arg0 & 0x00010000
 write: 1
 eventfd2: 1
-dup: 1
 poll: 1
 getpid: 1