- (djm) [sandbox-seccomp-filter.c sandbox-systrace.c] Allow shutdown(2)

   syscall from sandboxes; it may be called by packet_close.

1 files changed, 1 insertions, 0 deletions

diff --git a/sandbox-systrace.c b/sandbox-systrace.c
index 53fbd47cb..3d4677838 100644
--- a/sandbox-systrace.c
+++ b/sandbox-systrace.c
@@ -66,6 +66,7 @@ static const struct sandbox_policy preauth_policy[] = {
         { SYS_munmap, SYSTR_POLICY_PERMIT },
         { SYS_read, SYSTR_POLICY_PERMIT },
         { SYS_select, SYSTR_POLICY_PERMIT },
+        { SYS_shutdown, SYSTR_POLICY_PERMIT },
         { SYS_sigprocmask, SYSTR_POLICY_PERMIT },
         { SYS_write, SYSTR_POLICY_PERMIT },
         { -1, -1 }