[seccomp] allow prlimit64

it's needed by getdtablesize, at least on glibc
2021-03-20 09:24:44 +00:00 · 2021-03-20 09:24:44 +00:00 · e3d81f49cc
parent d632468df5
commit e3d81f49cc
1 changed files with 1 additions and 0 deletions
--- a/sandbox.c
+++ b/sandbox.c
@ -182,6 +182,7 @@ sandbox_server_process(void)

 		/* for imsg */
 		SC_ALLOW(sendmsg),
+		SC_ALLOW(prlimit64),

 		/* needed for signal handling */
 		SC_ALLOW(rt_sigreturn),