seccomp: allow quotactl with CAP_SYS_ADMIN

thaJeztah · thaJeztah · commit e5cc7d5276ed · 2020-08-26T14:02:53.000+02:00
This allows the quotactl syscall in the default seccomp profile, gated by CAP_SYS_ADMIN. Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 5cdb6e8) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
diff --git a/contrib/seccomp/seccomp_default.go b/contrib/seccomp/seccomp_default.go
@@ -522,6 +522,7 @@ func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp {
 					"mount",
 					"name_to_handle_at",
 					"perf_event_open",
+					"quotactl",
 					"setdomainname",
 					"sethostname",
 					"setns",
