Add readlink (valoq)

diff --git a/src/seccomp.c b/src/seccomp.c
index 88c738103fec3d3cdc70aa46ab20bb723167787b..7c8a31443b43f60c0e8bdedc6d2a64da48d04b11 100644 (file)
--- a/src/seccomp.c
+++ b/src/seccomp.c
@@ -27,7 +27,7 @@
 #include "file.h"
 
 #ifndef        lint
-FILE_RCSID("@(#)$File: seccomp.c,v 1.1 2017/09/24 16:04:56 christos Exp $")
+FILE_RCSID("@(#)$File: seccomp.c,v 1.2 2017/11/04 01:14:25 christos Exp $")
 #endif /* lint */
 
 #if HAVE_LIBSECCOMP
@@ -182,6 +182,7 @@ enable_sandbox_full(void)
        ALLOW_RULE(openat);
        ALLOW_RULE(pread64);
        ALLOW_RULE(read);
+       ALLOW_RULE(readlink);
        ALLOW_RULE(rt_sigaction);
        ALLOW_RULE(rt_sigprocmask);
        ALLOW_RULE(rt_sigreturn);
@@ -196,7 +197,6 @@ enable_sandbox_full(void)
        // needed by valgrind
        ALLOW_RULE(gettid);
        ALLOW_RULE(getpid);
-       ALLOW_RULE(readlink);
        ALLOW_RULE(rt_sigtimedwait);
 #endif