privsep: Allow dup2 with SECCOMP

NetworkConfiguration · Oct 19, 2023 · fd2e62e · fd2e62e
1 parent ac4a70d
commit fd2e62e
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/privsep-linux.c b/src/privsep-linux.c
@@ -310,6 +310,9 @@ static struct sock_filter ps_seccomp_filter[] = {
 #ifdef __NR_close
 	SECCOMP_ALLOW(__NR_close),
 #endif
+#ifdef __NR_dup2
+	SECCOMP_ALLOW(__NR_dup2), // daemonising dups stderr to stdin(/dev/null)
+#endif
 #ifdef __NR_epoll_ctl
 	SECCOMP_ALLOW(__NR_epoll_ctl),
 #endif