From e725c27098a27158a890e689d85b1d10e5b7d9fa Mon Sep 17 00:00:00 2001 From: Michael McVady Date: Thu, 31 Mar 2022 21:24:14 -0500 Subject: Disable seccomp tracing --- conf/clog.conf | 9 +++++---- src/clog.c | 1 + 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/conf/clog.conf b/conf/clog.conf index ca23f0a..c2b4041 100644 --- a/conf/clog.conf +++ b/conf/clog.conf @@ -10,12 +10,13 @@ load ./clog.so init workers 4 privsep worker { - runas kore - root /var/chroot/kore + runas kore + + root /var/chroot/kore } -# seccomp_tracing no -seccomp_tracing yes +seccomp_tracing no +# seccomp_tracing yes domain * { attach notls diff --git a/src/clog.c b/src/clog.c index d3d7097..3265602 100644 --- a/src/clog.c +++ b/src/clog.c @@ -13,6 +13,7 @@ #include "../lib/md4c/src/md4c-html.c" KORE_SECCOMP_FILTER("clog", + KORE_SYSCALL_ALLOW(bind), KORE_SYSCALL_ALLOW(getdents64), KORE_SYSCALL_ALLOW(sendmmsg), KORE_SYSCALL_ALLOW(uname) -- cgit v1.2.3