From 43c1ad2b5af6401fa61d43d04e67f0598c2d4cd6 Mon Sep 17 00:00:00 2001
From: Brian Gough <briangough@users.noreply.github.com>
Date: Tue, 11 Nov 2025 09:12:14 +0000
Subject: [PATCH] Merge pull request #29618 from
 overleaf/bg-allow-statx-call-in-clsi-seccomp

allow statx and openat2 syscalls in seccomp profile

GitOrigin-RevId: f7d3ae5bb5f2fedcc9e071d70f24baaf13be27f4
---
 services/clsi/seccomp/clsi-profile.json | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/services/clsi/seccomp/clsi-profile.json b/services/clsi/seccomp/clsi-profile.json
index 084354b15c..e56910b403 100644
--- a/services/clsi/seccomp/clsi-profile.json
+++ b/services/clsi/seccomp/clsi-profile.json
@@ -443,6 +443,11 @@
             "action": "SCMP_ACT_ALLOW",
             "args": []
         },
+        {
+            "name": "openat2",
+            "action": "SCMP_ACT_ALLOW",
+            "args": []
+        },
         {
             "name": "pause",
             "action": "SCMP_ACT_ALLOW",
@@ -648,6 +653,11 @@
             "action": "SCMP_ACT_ALLOW",
             "args": []
         },
+        {
+            "name": "statx",
+            "action": "SCMP_ACT_ALLOW",
+            "args": []
+        },
         {
             "name": "stat64",
             "action": "SCMP_ACT_ALLOW",