aboutsummaryrefslogtreecommitdiffstats
path: root/etc/skanlite.profile
diff options
context:
space:
mode:
Diffstat (limited to 'etc/skanlite.profile')
-rw-r--r--etc/skanlite.profile2
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/skanlite.profile b/etc/skanlite.profile
index f1a64093a..a9a8fdad6 100644
--- a/etc/skanlite.profile
+++ b/etc/skanlite.profile
@@ -23,7 +23,7 @@ nosound
23notv 23notv
24# novideo 24# novideo
25protocol unix,netlink 25protocol unix,netlink
26# skanlite makes ioperm system calls, which are blacklisted by default. 26# blacklisting of ioperm system calls breaks skanlite
27seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@reboot,@resources,@swap,acct,add_key,bpf,chroot,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,iopl,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pciconfig_iobase,pciconfig_read,pciconfig_write,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,s390_mmio_read,s390_mmio_write,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice 27seccomp.drop @clock,@cpu-emulation,@debug,@module,@obsolete,@reboot,@resources,@swap,acct,add_key,bpf,chroot,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,iopl,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,pciconfig_iobase,pciconfig_read,pciconfig_write,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,s390_mmio_read,s390_mmio_write,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice
28shell none 28shell none
29 29