join: misc improvements

* don't mess with umask of root, it could be more strict
than user umask and relaxing it may catch root by surprise

* join needs execveat syscall, need to drop it post-exec

* make things more explicit

1 files changed, 1 insertions, 0 deletions

diff --git a/src/lib/syscall.c b/src/lib/syscall.c
index 4903971ad..6823d0ae6 100644
--- a/src/lib/syscall.c
+++ b/src/lib/syscall.c
@@ -336,6 +336,7 @@ static const SyscallGroupList sysgroups[] = {
 #endif
         },
         { .name = "@default-keep", .list =
+          "execveat," // commonly used by fexecve
           "execve,"
           "prctl"
         },