Merge pull request #751 from landlock-lsm/landlock

giuseppe · web-flow · commit 946c877fa809 · 2022-10-26T22:17:42.000+02:00
generate/seccomp: Allow Landlock syscalls
diff --git a/generate/seccomp/seccomp_default.go b/generate/seccomp/seccomp_default.go
@@ -151,6 +151,9 @@ func DefaultProfile(rs *specs.Spec) *rspec.LinuxSeccomp {
 				"io_submit",
 				"ipc",
 				"kill",
+				"landlock_add_rule",
+				"landlock_create_ruleset",
+				"landlock_restrict_self",
 				"lchown",
 				"lchown32",
 				"lgetxattr",
