ifch doesn't need chmod or unlink whitelisted for seccomp-filter.

2014-03-22 23:39:50 -04:00 · 2014-03-22 23:39:50 -04:00 · 4b92b10f32
commit 4b92b10f32
parent 71db577ed5
1 changed files with 0 additions and 2 deletions
--- a/ndhc/seccomp.c
+++ b/ndhc/seccomp.c
@ -145,8 +145,6 @@ int enforce_seccomp_ifch(void)
        ALLOW_SYSCALL(lseek),
        ALLOW_SYSCALL(truncate),
        ALLOW_SYSCALL(fcntl),
-        ALLOW_SYSCALL(unlink),
-        ALLOW_SYSCALL(chmod),

        ALLOW_SYSCALL(rt_sigreturn),
 #ifdef __NR_sigreturn