diff options
-rw-r--r-- | sandbox-seccomp-filter.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c index 2831e9d10..200932a8c 100644 --- a/sandbox-seccomp-filter.c +++ b/sandbox-seccomp-filter.c | |||
@@ -225,6 +225,7 @@ static const struct sock_filter preauth_insns[] = { | |||
225 | #endif | 225 | #endif |
226 | #ifdef __NR_socketcall | 226 | #ifdef __NR_socketcall |
227 | SC_ALLOW_ARG(__NR_socketcall, 0, SYS_SHUTDOWN), | 227 | SC_ALLOW_ARG(__NR_socketcall, 0, SYS_SHUTDOWN), |
228 | SC_DENY(__NR_ssocketcall, EACCES), | ||
228 | #endif | 229 | #endif |
229 | #if defined(__NR_ioctl) && defined(__s390__) | 230 | #if defined(__NR_ioctl) && defined(__s390__) |
230 | /* Allow ioctls for ICA crypto card on s390 */ | 231 | /* Allow ioctls for ICA crypto card on s390 */ |