seccomp: kernel 5.12 (mount_setattr)

AkihiroSuda · AkihiroSuda · commit 1329ea3716c6 · 2022-02-01T09:06:41.000+09:00
Allow `mount_setattr` when `CAP_SYS_ADMIN` is granted. See https://man7.org/linux/man-pages/man2/mount_setattr.2.html Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
diff --git a/contrib/seccomp/seccomp_default.go b/contrib/seccomp/seccomp_default.go
@@ -537,6 +537,7 @@ func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp {
 					"fspick",
 					"lookup_dcookie",
 					"mount",
+					"mount_setattr",
 					"move_mount",
 					"name_to_handle_at",
 					"open_tree",
