seccomp: fine tuning whitelist by adding times()

This was causing Qemu process to hang when using -sandbox on as discribed on RHBZ: https://bugzilla.redhat.com/show_bug.cgi?id=1004175 Signed-off-by: Eduardo Otubo <[email protected]> Tested-by: Paul Moore <[email protected]> Acked-by: Paul Moore <[email protected]>
hallyn · Sep 24, 2013 · c236f45 · c236f45
1 parent f828a4c
commit c236f45
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/qemu-seccomp.c b/qemu-seccomp.c
@@ -90,6 +90,7 @@ static const struct QemuSeccompSyscall seccomp_whitelist[] = {
     { SCMP_SYS(getuid), 245 },
     { SCMP_SYS(geteuid), 245 },
     { SCMP_SYS(timer_create), 245 },
+    { SCMP_SYS(times), 245 },
     { SCMP_SYS(exit), 245 },
     { SCMP_SYS(clock_gettime), 245 },
     { SCMP_SYS(time), 245 },