Allow madvise too, since it is used in some malloc implementations

(Leandro Pereira)

diff --git a/src/seccomp.c b/src/seccomp.c
index e7829fff1a91749ab16500afb67103f08ccdce97..1b9d9b8559377c8571dc17968858d58a0b2205fa 100644 (file)
--- a/src/seccomp.c
+++ b/src/seccomp.c
@@ -27,7 +27,7 @@
 #include "file.h"
 
 #ifndef        lint
-FILE_RCSID("@(#)$File: seccomp.c,v 1.7 2018/09/09 20:33:28 christos Exp $")
+FILE_RCSID("@(#)$File: seccomp.c,v 1.8 2019/02/24 18:12:04 christos Exp $")
 #endif /* lint */
 
 #if HAVE_LIBSECCOMP
@@ -176,6 +176,7 @@ enable_sandbox_full(void)
        ALLOW_RULE(_llseek);
        ALLOW_RULE(lstat);
        ALLOW_RULE(lstat64);
+       ALLOW_RULE(madvise);
        ALLOW_RULE(mmap);
        ALLOW_RULE(mmap2);
        ALLOW_RULE(mprotect);