Browse code

seccomp: allow syscall membarrier

Add the membarrier syscall to the default seccomp profile.
It is for example used in the implementation of dlopen() in
the musl libc of Alpine images.

Signed-off-by: Julio Guerra <julio@sqreen.com>

Julio Guerra authored on 2020/03/23 23:51:08
Showing 2 changed files
... ...
@@ -187,6 +187,7 @@
187 187
 				"lstat",
188 188
 				"lstat64",
189 189
 				"madvise",
190
+				"membarrier",
190 191
 				"memfd_create",
191 192
 				"mincore",
192 193
 				"mkdir",
... ...
@@ -180,6 +180,7 @@ func DefaultProfile() *types.Seccomp {
180 180
 				"lstat",
181 181
 				"lstat64",
182 182
 				"madvise",
183
+				"membarrier",
183 184
 				"memfd_create",
184 185
 				"mincore",
185 186
 				"mkdir",