util: Add missing unlinkat to syscall sandbox

LarryRuane · Feb 14, 2022 · fa45597 · fa45597
1 parent af0b578
commit fa45597
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/util/syscall_sandbox.cpp b/src/util/syscall_sandbox.cpp
@@ -600,6 +600,7 @@ class SeccompPolicyBuilder
         allowed_syscalls.insert(__NR_statfs);          // get filesystem statistics
         allowed_syscalls.insert(__NR_statx);           // get file status (extended)
         allowed_syscalls.insert(__NR_unlink);          // delete a name and possibly the file it refers to
+        allowed_syscalls.insert(__NR_unlinkat);        // delete relative to a directory file descriptor
     }
 
     void AllowFutex()