From e7cc70baf75c1cbb234af74c6e545bbb91f97b6c Mon Sep 17 00:00:00 2001
From: Brian Gough <briangough@users.noreply.github.com>
Date: Wed, 12 Nov 2025 15:58:23 +0000
Subject: [PATCH] Merge pull request #29639 from
 overleaf/bg-block-clone3-for-docker

use docker default seccomp rule for clone3

GitOrigin-RevId: 32a65a2f2262225fafa1ac1a9f8d6f2767c2829c
---
 services/clsi/seccomp/clsi-profile.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/services/clsi/seccomp/clsi-profile.json b/services/clsi/seccomp/clsi-profile.json
index e56910b403..c78027b15e 100644
--- a/services/clsi/seccomp/clsi-profile.json
+++ b/services/clsi/seccomp/clsi-profile.json
@@ -63,6 +63,11 @@
                 }
             ]
         },
+        {
+            "name": "clone3",
+            "action": "SCMP_ACT_ERRNO",
+            "errnoRet": 38
+        },
         {
             "name": "close",
             "action": "SCMP_ACT_ALLOW",
@@ -848,4 +853,4 @@
           "args": []
         }
     ]
-}
\ No newline at end of file
+}