seccomp: whitelist statx syscall

This whitelists the statx syscall; libseccomp-2.3.3 or up is needed for this, older seccomp versions will ignore this. Equivalent of moby/moby#36417 Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 8f8fd3c) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
containerd · Mar 20, 2019 · 03d129b · 03d129b
1 parent 9a0a5fd
commit 03d129b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/contrib/seccomp/seccomp_default.go b/contrib/seccomp/seccomp_default.go
@@ -319,6 +319,7 @@ func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp {
 				"stat64",
 				"statfs",
 				"statfs64",
+				"statx",
 				"symlink",
 				"symlinkat",
 				"sync",