Browse code

profiles: seccomp: allow clock_settime when CAP_SYS_TIME is added

Signed-off-by: Antonio Murdaca <runcom@redhat.com>
(cherry picked from commit 3ab4961032315abb4fd4ed813034a114d1d55699)

Antonio Murdaca authored on 2017/03/20 19:00:34
Showing 2 changed files
... ...
@@ -898,7 +898,8 @@
898 898
 			"names": [
899 899
 				"settimeofday",
900 900
 				"stime",
901
-				"adjtimex"
901
+				"adjtimex",
902
+				"clock_settime"
902 903
 			],
903 904
 			"action": "SCMP_ACT_ALLOW",
904 905
 			"args": [],
... ...
@@ -733,6 +733,7 @@ func DefaultProfile() *types.Seccomp {
733 733
 				"settimeofday",
734 734
 				"stime",
735 735
 				"adjtimex",
736
+				"clock_settime",
736 737
 			},
737 738
 			Action: types.ActAllow,
738 739
 			Args:   []*types.Arg{},