From ae3db84128503c16fd638b5c7bf9408d64ce14ba Mon Sep 17 00:00:00 2001 From: netblue30 Date: Mon, 14 Jan 2019 09:44:53 -0500 Subject: adding mincore syscall to the default seccomp filter and some independent profiles --- etc/clementine.profile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'etc/clementine.profile') diff --git a/etc/clementine.profile b/etc/clementine.profile index 147b0de4b..1cf478ead 100644 --- a/etc/clementine.profile +++ b/etc/clementine.profile @@ -27,7 +27,7 @@ nou2f novideo protocol unix,inet,inet6 # blacklisting of ioprio_set system calls breaks clementine -seccomp.drop @cpu-emulation,@debug,@obsolete,@privileged,@resources,add_key,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,kcmp,keyctl,name_to_handle_at,ni_syscall,open_by_handle_at,personality,process_vm_readv,ptrace,remap_file_pages,request_key,syslog,umount,userfaultfd,vmsplice +seccomp.drop mincore,@cpu-emulation,@debug,@obsolete,@privileged,@resources,add_key,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,kcmp,keyctl,name_to_handle_at,ni_syscall,open_by_handle_at,personality,process_vm_readv,ptrace,remap_file_pages,request_key,syslog,umount,userfaultfd,vmsplice private-dev private-tmp -- cgit v1.2.3-54-g00ecf