seccomp: add pidfd_getfd syscall (gated by CAP_SYS_PTRACE)

thaJeztah · thaJeztah · commit ebffce3adf23 · 2020-11-13T16:25:20.000+01:00
Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 0a1104b) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
diff --git a/contrib/seccomp/seccomp_default.go b/contrib/seccomp/seccomp_default.go
@@ -573,6 +573,7 @@ func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp {
 			s.Syscalls = append(s.Syscalls, specs.LinuxSyscall{
 				Names: []string{
 					"kcmp",
+					"pidfd_getfd",
 					"process_vm_readv",
 					"process_vm_writev",
 					"ptrace",
