Brian Gough
e7cc70baf7
Merge pull request #29639 from overleaf/bg-block-clone3-for-docker
...
use docker default seccomp rule for clone3
GitOrigin-RevId: 32a65a2f2262225fafa1ac1a9f8d6f2767c2829c
2025-11-13 09:06:28 +00:00
Brian Gough
43c1ad2b5a
Merge pull request #29618 from overleaf/bg-allow-statx-call-in-clsi-seccomp
...
allow statx and openat2 syscalls in seccomp profile
GitOrigin-RevId: f7d3ae5bb5f2fedcc9e071d70f24baaf13be27f4
2025-11-12 09:05:08 +00:00
Jimmy Domagala-Tang
683ea90f64
Merge pull request #17299 from overleaf/jdt-clsi-allow-getrandom
...
Allow getrandom calls in CLSI
GitOrigin-RevId: 3fcb9239422e25456ef5211248aad4bcd2ec786f
2024-04-05 08:04:09 +00:00
Henry Oswald
9eb3b0b221
add epoll_pwait to secomp profile
...
Last year golang changed from epoll_wait to epoll_pwait https://github.com/golang/go/issues/23750
This causes golang panic errors on mac when running secomp secure compiles using docker 18.09.1. It may start to become a problem on linux where we are running on 17.03.2-ce in production.
2019-01-24 12:30:37 +00:00
Henry Oswald
ae84777c94
add time secomp
2018-08-21 18:56:53 +01:00
Henry Oswald
c4e8d76427
added seccomp
2018-06-26 12:43:47 +01:00
