mirrors
/
kore
mirror of https://git.kore.io/kore.git
1
0
Fork 1
Code Issues Projects Releases Wiki Activity

More seccomp work.

This commit is contained in:
Joris Vink 2023-04-06 10:16:06 +02:00
parent 208b0e868f
commit e2dbda88b6
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/curl.c
View File

@ -30,6 +30,7 @@ static struct sock_filter filter_curl[] = {
KORE_SYSCALL_ALLOW(bind), KORE_SYSCALL_ALLOW(bind),
KORE_SYSCALL_ALLOW(ioctl), KORE_SYSCALL_ALLOW(ioctl),
KORE_SYSCALL_ALLOW(connect), KORE_SYSCALL_ALLOW(connect),
KORE_SYSCALL_ALLOW(socketpair),
KORE_SYSCALL_ALLOW(getsockopt), KORE_SYSCALL_ALLOW(getsockopt),
KORE_SYSCALL_ALLOW(getsockname), KORE_SYSCALL_ALLOW(getsockname),
KORE_SYSCALL_ALLOW_ARG(socket, 0, AF_INET), KORE_SYSCALL_ALLOW_ARG(socket, 0, AF_INET),
@ -38,14 +39,14 @@ static struct sock_filter filter_curl[] = {
KORE_SYSCALL_ALLOW_ARG(socket, 0, AF_NETLINK), KORE_SYSCALL_ALLOW_ARG(socket, 0, AF_NETLINK),
/* Threading related. */ /* Threading related. */
KORE_SYSCALL_ALLOW(clone),
KORE_SYSCALL_ALLOW(set_robust_list),
#if defined(SYS_clone3) #if defined(SYS_clone3)
KORE_SYSCALL_ALLOW(clone3), KORE_SYSCALL_ALLOW(clone3),
#endif #endif
#if defined(SYS_rseq) #if defined(SYS_rseq)
KORE_SYSCALL_ALLOW(rseq), KORE_SYSCALL_ALLOW(rseq),
#endif #endif
KORE_SYSCALL_ALLOW(clone),
KORE_SYSCALL_ALLOW(set_robust_list),
/* Other */ /* Other */
KORE_SYSCALL_ALLOW(uname), KORE_SYSCALL_ALLOW(uname),
@ -56,6 +57,11 @@ static struct sock_filter filter_curl[] = {
KORE_SYSCALL_ALLOW(faccessat), KORE_SYSCALL_ALLOW(faccessat),
KORE_SYSCALL_ALLOW(newfstatat), KORE_SYSCALL_ALLOW(newfstatat),
KORE_SYSCALL_ALLOW(getpeername), KORE_SYSCALL_ALLOW(getpeername),
#if defined(SYS_getdents64)
KORE_SYSCALL_ALLOW(getdents64),
#endif
}; };
#endif #endif