MrBesen
/
FontBot
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

added syscalls

This commit is contained in:
mrbesen 2021-12-02 11:56:43 +01:00
parent e8e1b867bb
commit db047ef797
Signed by: MrBesen
GPG Key ID: 596B2350DCD67504
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/main.cpp
View File

@ -97,6 +97,9 @@ static bool enableSecurity() {
seccomp_rule_add(scmp, SCMP_ACT_ALLOW, SCMP_SYS(recvfrom), 0);
seccomp_rule_add(scmp, SCMP_ACT_ALLOW, SCMP_SYS(fcntl), 0);
seccomp_rule_add(scmp, SCMP_ACT_ALLOW, SCMP_SYS(uname), 0);
seccomp_rule_add(scmp, SCMP_ACT_ALLOW, SCMP_SYS(sigprocmask), 0);
seccomp_rule_add(scmp, SCMP_ACT_ALLOW, SCMP_SYS(rt_sigprocmask), 0);
seccomp_rule_add(scmp, SCMP_ACT_ALLOW, SCMP_SYS(sigprocmask), 0);
seccomp_rule_add(scmp, SCMP_ACT_ALLOW, SCMP_SYS(clone), 0); // curl wants to spawn threads
seccomp_rule_add(scmp, SCMP_ACT_ALLOW, SCMP_SYS(mmap), 0);