summaryrefslogtreecommitdiff
path: root/linux_priv.c
diff options
context:
space:
mode:
Diffstat (limited to 'linux_priv.c')
-rw-r--r--linux_priv.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/linux_priv.c b/linux_priv.c
index 811d6e8..04155dd 100644
--- a/linux_priv.c
+++ b/linux_priv.c
@@ -33,6 +33,7 @@ void drop_privileges(void) {
rc |= seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(read), 0);
rc |= seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(lseek), 0);
rc |= seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(close), 0);
+ rc |= seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(getpid), 0);
#endif
if (rc != 0) {
@@ -78,6 +79,7 @@ void drop_worker_privileges(void) {
// stat
rc |= seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(getsockname), 0);
+ rc |= seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(getpid), 0);
if (settings.shutdown_command) {
rc |= seccomp_rule_add(ctx, SCMP_ACT_ALLOW, SCMP_SYS(tgkill), 0);