Merge pull request #63 from mansukim1125/seccomp_signal31

fix: always occur signal 31 when executing C-based program
QingdaoU · Jan 20, 2022 · 016653c · 016653c
2 parents 57ac33a + 541d79d
commit 016653c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/rules/c_cpp.c b/src/rules/c_cpp.c
@@ -17,7 +17,7 @@ int _c_cpp_seccomp_rules(struct config *_config, bool allow_write_file) {
                                 SCMP_SYS(close), SCMP_SYS(readlink),
                                 SCMP_SYS(sysinfo), SCMP_SYS(write),
                                 SCMP_SYS(writev), SCMP_SYS(lseek),
-                                SCMP_SYS(clock_gettime)};
+                                SCMP_SYS(clock_gettime), SCMP_SYS(pread64)}; // add extra rule for pread64
 
     int syscalls_whitelist_length = sizeof(syscalls_whitelist) / sizeof(int);
     scmp_filter_ctx ctx = NULL;