seccomp: add rseq() to default list of syscalls to whitelist

poettering · poettering · commit 6fee3be0b492 · 2019-03-28T12:09:38.000+01:00
Apparently glibc is going to call this implicitly soon, hence let's whitelist this by default. Fixes: #12127
diff --git a/src/shared/seccomp-util.c b/src/shared/seccomp-util.c
@@ -291,6 +291,7 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
                 "pause\0"
                 "prlimit64\0"
                 "restart_syscall\0"
+                "rseq\0"
                 "rt_sigreturn\0"
                 "sched_yield\0"
                 "set_robust_list\0"
