From aeba3f45741ca6da3aae650dc71b4f510fc7881d Mon Sep 17 00:00:00 2001
From: kpcyrd <git@rxv.cc>
Date: Fri, 3 Dec 2021 16:06:10 +0100
Subject: [PATCH] Allow statx and lseek syscalls

---
 src/sandbox/seccomp.rs | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/sandbox/seccomp.rs b/src/sandbox/seccomp.rs
index 20b5a30..4ee1d84 100644
--- a/src/sandbox/seccomp.rs
+++ b/src/sandbox/seccomp.rs
@@ -70,6 +70,10 @@ pub fn init() -> Result<()> {
     ctx.allow_syscall(Syscall::getpeername)?;
     ctx.allow_syscall(Syscall::gettimeofday)?;
     ctx.allow_syscall(Syscall::membarrier)?;
+    ctx.allow_syscall(Syscall::statx)?;
+    ctx.allow_syscall(Syscall::lseek)?;
+    #[cfg(target_arch = "arm")]
+    ctx.allow_syscall(Syscall::_llseek)?;
 
     ctx.set_action_for_syscall(Action::Errno(1), Syscall::openat)?;
     #[cfg(not(target_arch = "aarch64"))]