Allow clone3 syscall in sandbox (#235)

2022-11-12 21:46:47 +01:00
parent a2c70e43de
commit dc26c14da4
1 changed files with 1 additions and 0 deletions
--- a/src/sandbox/seccomp.rs
+++ b/src/sandbox/seccomp.rs
@@ -77,6 +77,7 @@ pub fn init() -> Result<()> {
    ctx.allow_syscall(Syscall::lseek)?;
    #[cfg(target_arch = "arm")]
    ctx.allow_syscall(Syscall::_llseek)?;
+    ctx.allow_syscall(Syscall::clone3)?;

    ctx.set_action_for_syscall(Action::Errno(1), Syscall::openat)?;
    #[cfg(not(any(target_arch = "aarch64", target_arch = "riscv64")))]