allow-clock_adjtime.patch

   1 From 0cf506c92967c84f9ed83ba9e1be946a7fda6425 Mon Sep 17 00:00:00 2001
   2 From: Miroslav Lichvar <mlichvar@redhat.com>
   3 Date: Mon, 2 Dec 2019 12:47:13 +0100
   4 Subject: sys_linux: allow clock_adjtime in seccomp filter
   5
   6 The adjtimex() function in glibc was switched to the clock_adjtime
   7 system call.
   8
   9 diff --git a/sys_linux.c b/sys_linux.c
  10 index 63eb8f1..fcf89c2 100644
  11 --- a/sys_linux.c
  12 +++ b/sys_linux.c
  13 @@ -478,8 +478,8 @@ SYS_Linux_EnableSystemCallFilter(int level)
  14  {
  15    const int syscalls[] = {
  16      /* Clock */
  17 -    SCMP_SYS(adjtimex), SCMP_SYS(clock_gettime), SCMP_SYS(gettimeofday),
  18 -    SCMP_SYS(settimeofday), SCMP_SYS(time),
  19 +    SCMP_SYS(adjtimex), SCMP_SYS(clock_adjtime), SCMP_SYS(clock_gettime),
  20 +    SCMP_SYS(gettimeofday), SCMP_SYS(settimeofday), SCMP_SYS(time),
  21      /* Process */
  22      SCMP_SYS(clone), SCMP_SYS(exit), SCMP_SYS(exit_group), SCMP_SYS(getpid),
  23      SCMP_SYS(getrlimit), SCMP_SYS(rt_sigaction), SCMP_SYS(rt_sigreturn),
  24 --
  25 cgit v0.10.2
  26