From 9eb3b0b221f57751a5e8fda3753e991e0d353724 Mon Sep 17 00:00:00 2001 From: Henry Oswald Date: Thu, 24 Jan 2019 12:30:37 +0000 Subject: [PATCH] add epoll_pwait to secomp profile Last year golang changed from epoll_wait to epoll_pwait https://github.com/golang/go/issues/23750 This causes golang panic errors on mac when running secomp secure compiles using docker 18.09.1. It may start to become a problem on linux where we are running on 17.03.2-ce in production. --- services/clsi/seccomp/clsi-profile.json | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/services/clsi/seccomp/clsi-profile.json b/services/clsi/seccomp/clsi-profile.json index 34fd2520ad..e7e9dd010b 100644 --- a/services/clsi/seccomp/clsi-profile.json +++ b/services/clsi/seccomp/clsi-profile.json @@ -827,6 +827,10 @@ "name": "gettimeofday", "action": "SCMP_ACT_ALLOW", "args": [] + }, { + "name": "epoll_pwait", + "action": "SCMP_ACT_ALLOW", + "args": [] } ] } \ No newline at end of file