seccomp: allow clock_settime when CAP_SYS_TIME is added

thaJeztah · thaJeztah · commit 3d28944befd7 · 2020-08-26T14:02:55.000+02:00
Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 0a5ee7e) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
diff --git a/contrib/seccomp/seccomp_default.go b/contrib/seccomp/seccomp_default.go
@@ -587,6 +587,7 @@ func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp {
 				Names: []string{
 					"settimeofday",
 					"stime",
+					"clock_settime",
 				},
 				Action: specs.ActAllow,
 				Args:   []specs.LinuxSeccompArg{},
