go
/
gvisor
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Remove unecessary seccomp permission. 

This removes the F_DUPFD_CLOEXEC support for the gofer, previously 
required when depending on the STL net package.
This commit is contained in:
Robert Tonic 2019-09-24 18:37:25 -04:00
parent 7810b30983
commit 9ebd498a55
1 changed files with 0 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
runsc/fsgofer/filter/config.go
View File

@ -83,10 +83,6 @@ var allowedSyscalls = seccomp.SyscallRules{
seccomp.AllowAny{}, seccomp.AllowAny{},
seccomp.AllowValue(syscall.F_GETFD), seccomp.AllowValue(syscall.F_GETFD),
}, },
{
seccomp.AllowAny{},
seccomp.AllowValue(syscall.F_DUPFD_CLOEXEC),
},
}, },
syscall.SYS_FSTAT: {}, syscall.SYS_FSTAT: {},
syscall.SYS_FSTATFS: {}, syscall.SYS_FSTATFS: {},