Allow chroot() syscall

Now that pivot_root() is used instead of chroot(), allowing chroot() is safe.
golemfactory · Dec 10, 2023 · 5669531 · 5669531
1 parent e9a3ed5
commit 5669531
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/runtime/init-container/src/seccomp.c b/runtime/init-container/src/seccomp.c
@@ -37,6 +37,7 @@ static const char *allow_syscalls[] = {
     "chmod",
     "chown",
     "chown32",
+    "chroot",
     "clock_adjtime",
     "clock_adjtime64",
     "clock_getres",