util: Add missing unlinkat to syscall sandbox

MarcoFalke · MarcoFalke · commit fa455975e52d · 2022-02-14T17:12:34.000+01:00
diff --git a/src/util/syscall_sandbox.cpp b/src/util/syscall_sandbox.cpp
@@ -600,6 +600,7 @@ class SeccompPolicyBuilder
         allowed_syscalls.insert(__NR_statfs);          // get filesystem statistics
         allowed_syscalls.insert(__NR_statx);           // get file status (extended)
         allowed_syscalls.insert(__NR_unlink);          // delete a name and possibly the file it refers to
+        allowed_syscalls.insert(__NR_unlinkat);        // delete relative to a directory file descriptor
     }
 
     void AllowFutex()

Original file line number	Diff line number	Diff line change
`@@ -600,6 +600,7 @@ class SeccompPolicyBuilder`
`600`	`600`	`allowed_syscalls.insert(__NR_statfs); // get filesystem statistics`
`601`	`601`	`allowed_syscalls.insert(__NR_statx); // get file status (extended)`
`602`	`602`	`allowed_syscalls.insert(__NR_unlink); // delete a name and possibly the file it refers to`
	`603`	`+ allowed_syscalls.insert(__NR_unlinkat); // delete relative to a directory file descriptor`
`603`	`604`	`}`
`604`	`605`
`605`	`606`	`void AllowFutex()`