From 420142a8864e10ba2832bbd344275c1302defc69 Mon Sep 17 00:00:00 2001 From: Bastien Pascard Date: Wed, 6 Jul 2022 23:45:13 +0200 Subject: [PATCH] profiles: seccomp: allow clock_settime64 when CAP_SYS_TIME is added Signed-off-by: Bastien Pascard --- profiles/seccomp/default.json | 3 ++- profiles/seccomp/default_linux.go | 1 + 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/profiles/seccomp/default.json b/profiles/seccomp/default.json index ed553e2d9c..fb9c44eff7 100644 --- a/profiles/seccomp/default.json +++ b/profiles/seccomp/default.json @@ -743,7 +743,8 @@ "names": [ "settimeofday", "stime", - "clock_settime" + "clock_settime", + "clock_settime64" ], "action": "SCMP_ACT_ALLOW", "includes": { diff --git a/profiles/seccomp/default_linux.go b/profiles/seccomp/default_linux.go index 1bc8ed86f0..4e747eef82 100644 --- a/profiles/seccomp/default_linux.go +++ b/profiles/seccomp/default_linux.go @@ -731,6 +731,7 @@ func DefaultProfile() *Seccomp { "settimeofday", "stime", "clock_settime", + "clock_settime64", }, Action: specs.ActAllow, },