summaryrefslogtreecommitdiff
path: root/sandbox-seccomp-filter.c
diff options
context:
space:
mode:
Diffstat (limited to 'sandbox-seccomp-filter.c')
-rw-r--r--sandbox-seccomp-filter.c9
1 files changed, 9 insertions, 0 deletions
diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
index ef4de8c65..e8f31555e 100644
--- a/sandbox-seccomp-filter.c
+++ b/sandbox-seccomp-filter.c
@@ -149,6 +149,15 @@ static const struct sock_filter preauth_insns[] = {
149#ifdef __NR_stat64 149#ifdef __NR_stat64
150 SC_DENY(__NR_stat64, EACCES), 150 SC_DENY(__NR_stat64, EACCES),
151#endif 151#endif
152#ifdef __NR_shmget
153 SC_DENY(__NR_shmget, EACCES),
154#endif
155#ifdef __NR_shmat
156 SC_DENY(__NR_shmat, EACCES),
157#endif
158#ifdef __NR_shmdt
159 SC_DENY(__NR_shmdt, EACCES),
160#endif
152 161
153 /* Syscalls to permit */ 162 /* Syscalls to permit */
154#ifdef __NR_brk 163#ifdef __NR_brk