seccomp: allow clone3

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
containers · Jun 16, 2021 · 78ac839 · 78ac839
1 parent f10e62c
commit 78ac839
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/pkg/seccomp/default_linux.go b/pkg/seccomp/default_linux.go
@@ -51,7 +51,6 @@ func DefaultProfile() *Seccomp {
 		{
 			Names: []string{
 				"bdflush",
-				"clone3",
 				"io_pgetevents",
 				"io_uring_enter",
 				"io_uring_register",
@@ -118,6 +117,7 @@ func DefaultProfile() *Seccomp {
 				"clock_nanosleep",
 				"clock_nanosleep_time64",
 				"clone",
+				"clone3",
 				"close",
 				"close_range",
 				"connect",

diff --git a/pkg/seccomp/seccomp.json b/pkg/seccomp/seccomp.json
@@ -54,7 +54,6 @@
 		{
 			"names": [
 				"bdflush",
-				"clone3",
 				"io_pgetevents",
 				"io_uring_enter",
 				"io_uring_register",
@@ -124,6 +123,7 @@
 				"clock_nanosleep",
 				"clock_nanosleep_time64",
 				"clone",
+				"clone3",
 				"close",
 				"close_range",
 				"connect",