Remove unecessary seccomp permission.
This removes the F_DUPFD_CLOEXEC support for the gofer, previously required when depending on the STL net package.
This commit is contained in:
parent
7810b30983
commit
9ebd498a55
|
@ -83,10 +83,6 @@ var allowedSyscalls = seccomp.SyscallRules{
|
|||
seccomp.AllowAny{},
|
||||
seccomp.AllowValue(syscall.F_GETFD),
|
||||
},
|
||||
{
|
||||
seccomp.AllowAny{},
|
||||
seccomp.AllowValue(syscall.F_DUPFD_CLOEXEC),
|
||||
},
|
||||
},
|
||||
syscall.SYS_FSTAT: {},
|
||||
syscall.SYS_FSTATFS: {},
|
||||
|
|
Loading…
Reference in New Issue