seccomp: allow clock_settime when CAP_SYS_TIME is added

thaJeztah · thaJeztah · commit 37c1a8ecb671 · 2020-09-14T16:17:41.000+02:00
Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 0a5ee7e) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
diff --git a/contrib/seccomp/seccomp_default.go b/contrib/seccomp/seccomp_default.go
@@ -589,6 +589,7 @@ func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp {
 				Names: []string{
 					"settimeofday",
 					"stime",
+					"clock_settime",
 				},
 				Action: specs.ActAllow,
 				Args:   []specs.LinuxSeccompArg{},
