Aleksa Sarai 54eff4354b profiles: seccomp: update to Linux 5.11 syscall list ... These syscalls (some of which have been in Linux for a while but were missing from the profile) fall into a few buckets: * close_range(2), epoll_pwait2(2) are just extensions of existing "safe for everyone" syscalls. * The mountv2 API syscalls (fs*(2), move_mount(2), open_tree(2)) are all equivalent to aspects of mount(2) and thus go into the CAP_SYS_ADMIN category. * process_madvise(2) is similar to the other process_*(2) syscalls and thus goes in the CAP_SYS_PTRACE category. Signed-off-by: Aleksa Sarai <asarai@suse.de>		2021-01-27 13:25:49 +11:00
..
apparmor	apparmor: permit signals from unconfined programs	2020-08-11 18:18:58 +10:00
seccomp	profiles: seccomp: update to Linux 5.11 syscall list	2021-01-27 13:25:49 +11:00