Removed syscalls open and openat from policy defined in addExecutionC…

…ontrolRules due to this syscalls being handled by policy defined in addFileSystemAccessRules
sio2project · Feb 11, 2024 · 3dbded8 · 3dbded8
1 parent b5903c6
commit 3dbded8
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/src/seccomp/policy/DefaultPolicy.cc b/src/seccomp/policy/DefaultPolicy.cc
@@ -42,9 +42,7 @@ void DefaultPolicy::addExecutionControlRules(bool allowFork) {
              "sigaltstack",
              "sigsuspend",
              "clock_nanosleep",
-             "open",
-             "epoll_create1",
-             "openat"});
+             "epoll_create1"});
 
     rules_.emplace_back(SeccompRule(
             "set_thread_area", action::ActionTrace([](auto& /* tracee */) {