diff options
| author | Michael McVady <femtonaut@gmail.com> | 2022-03-31 21:24:14 -0500 |
|---|---|---|
| committer | Michael McVady <femtonaut@gmail.com> | 2022-03-31 21:24:14 -0500 |
| commit | e725c27098a27158a890e689d85b1d10e5b7d9fa (patch) | |
| tree | 904ae4a18ae0011f88380842487942e7b551bfa6 | |
| parent | 9841c38342be0f6fa6f4f69eb62141d5fd45b78c (diff) | |
Disable seccomp tracing
| -rw-r--r-- | conf/clog.conf | 9 | ||||
| -rw-r--r-- | src/clog.c | 1 |
2 files changed, 6 insertions, 4 deletions
diff --git a/conf/clog.conf b/conf/clog.conf index ca23f0a..c2b4041 100644 --- a/conf/clog.conf +++ b/conf/clog.conf @@ -10,12 +10,13 @@ load ./clog.so init workers 4 privsep worker { - runas kore - root /var/chroot/kore + runas kore + + root /var/chroot/kore } -# seccomp_tracing no -seccomp_tracing yes +seccomp_tracing no +# seccomp_tracing yes domain * { attach notls @@ -13,6 +13,7 @@ #include "../lib/md4c/src/md4c-html.c" KORE_SECCOMP_FILTER("clog", + KORE_SYSCALL_ALLOW(bind), KORE_SYSCALL_ALLOW(getdents64), KORE_SYSCALL_ALLOW(sendmmsg), KORE_SYSCALL_ALLOW(uname) |