seccomp: add name_to_handle_at to allowlist

neersighted · neersighted · commit b335e3d305be · 2023-06-28T05:44:48.000-06:00
Based on the analysis on [the previous PR][1]. [1]: moby#45766 (review) Signed-off-by: Bjorn Neergaard <bjorn.neergaard@docker.com>
diff --git a/profiles/seccomp/default.json b/profiles/seccomp/default.json
@@ -237,6 +237,7 @@
 				"munlock",
 				"munlockall",
 				"munmap",
+				"name_to_handle_at",
 				"nanosleep",
 				"newfstatat",
 				"_newselect",
diff --git a/profiles/seccomp/default_linux.go b/profiles/seccomp/default_linux.go
@@ -229,6 +229,7 @@ func DefaultProfile() *Seccomp {
 					"munlock",
 					"munlockall",
 					"munmap",
+					"name_to_handle_at",
 					"nanosleep",
 					"newfstatat",
 					"_newselect",
