diff options
| author | Michael Pratt <mpratt@google.com> | 2018-09-12 10:50:22 -0700 |
|---|---|---|
| committer | Shentubot <shentubot@google.com> | 2018-09-12 10:51:25 -0700 |
| commit | 0efde2bfbde2fea78134a32f5fb34332ec0ce531 (patch) | |
| tree | 4f59ebd42bd8fd165e4f00f73b728b75b04dda2b | |
| parent | cbf39804647eabafb6138714ed222dbdc4781f2e (diff) | |
Remove getdents from filters
It was only used by whitelistfs, which was removed in
bc81f3fe4a042a15343d2eab44da32d818ac1ade.
PiperOrigin-RevId: 212666374
Change-Id: Ia35e6dc9d68c1a3b015d5b5f71ea3e68e46c5bed
| -rw-r--r-- | runsc/boot/filter/config.go | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/runsc/boot/filter/config.go b/runsc/boot/filter/config.go index 1a0c426ab..0bcc640d5 100644 --- a/runsc/boot/filter/config.go +++ b/runsc/boot/filter/config.go @@ -98,9 +98,8 @@ var allowedSyscalls = seccomp.SyscallRules{ seccomp.AllowValue(0), }, }, - syscall.SYS_GETDENTS64: {}, - syscall.SYS_GETPID: {}, - unix.SYS_GETRANDOM: {}, + syscall.SYS_GETPID: {}, + unix.SYS_GETRANDOM: {}, syscall.SYS_GETSOCKOPT: []seccomp.Rule{ { seccomp.AllowAny{}, |