Allow 64-bit version of fstat() syscall on Linux

On 32-bit architectures, glibc can't implement its fstat() function with the fstat() syscall; it requires fstat64() instead. Add that syscall to the seccomp whitelist, which should hopefully solve this issue: #14
eafer · Jan 26, 2021 · ecda324 · ecda324
1 parent ec10091
commit ecda324
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/sandbox.c b/src/sandbox.c
@@ -41,6 +41,7 @@ static void do_start_sandbox(void)
 	fail |= seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(exit_group), 0);
 	fail |= seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(close), 0);
 	fail |= seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(fstat), 0);
+	fail |= seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(fstat64), 0);
 	fail |= seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(mmap), 0);
 	fail |= seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(mremap), 0);
 	fail |= seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(munmap), 0);