From e3d81f49cc4084f6af16a497cf56d15d79d1c1b8 Mon Sep 17 00:00:00 2001
From: Omar Polo <op@omarpolo.com>
Date: Sat, 20 Mar 2021 09:24:44 +0000
Subject: [PATCH] [seccomp] allow prlimit64

it's needed by getdtablesize, at least on glibc
---
 sandbox.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/sandbox.c b/sandbox.c
index 509d6bb..1a0dc9a 100644
--- a/sandbox.c
+++ b/sandbox.c
@@ -182,6 +182,7 @@ sandbox_server_process(void)
 
 		/* for imsg */
 		SC_ALLOW(sendmsg),
+		SC_ALLOW(prlimit64),
 
 		/* needed for signal handling */
 		SC_ALLOW(rt_sigreturn),