From f8524392e8d67b482c467a80465df2a21c365476 Mon Sep 17 00:00:00 2001 From: Joris Vink Date: Tue, 5 Nov 2019 13:20:03 +0100 Subject: [PATCH] more seccomp adjustments in acme process --- src/acme.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/acme.c b/src/acme.c index 7416535..c67f853 100644 --- a/src/acme.c +++ b/src/acme.c @@ -54,10 +54,14 @@ /* The syscalls our acme worker is allowed to perform, only. */ static struct sock_filter filter_acme[] = { /* Net related. */ +#if defined(SYS_poll) KORE_SYSCALL_ALLOW(poll), +#endif KORE_SYSCALL_ALLOW(sendto), KORE_SYSCALL_ALLOW(recvfrom), +#if defined(SYS_epoll_wait) KORE_SYSCALL_ALLOW(epoll_wait), +#endif KORE_SYSCALL_ALLOW(epoll_pwait), /* Process things. */