seccomp: allow syscall membarrier

Julio Guerra · Julio Guerra · commit 1026f873a47c · 2020-04-07T16:24:17.000+02:00
Add the membarrier syscall to the default seccomp profile.
It is for example used in the implementation of dlopen() in
the musl libc of Alpine images.

Signed-off-by: Julio Guerra &lt;julio@sqreen.com&gt;
diff --git a/profiles/seccomp/default.json b/profiles/seccomp/default.json
@@ -187,6 +187,7 @@
 				"lstat",
 				"lstat64",
 				"madvise",
+				"membarrier",
 				"memfd_create",
 				"mincore",
 				"mkdir",
diff --git a/profiles/seccomp/seccomp_default.go b/profiles/seccomp/seccomp_default.go
@@ -180,6 +180,7 @@ func DefaultProfile() *types.Seccomp {
 				"lstat",
 				"lstat64",
 				"madvise",
+				"membarrier",
 				"memfd_create",
 				"mincore",
 				"mkdir",
