diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c index 98062f1..ddb01a7 100644 --- a/sandbox-seccomp-filter.c +++ b/sandbox-seccomp-filter.c @@ -245,6 +245,9 @@ static const struct sock_filter preauth_insns[] = { SC_ALLOW_ARG(__NR_socketcall, 0, SYS_SHUTDOWN), SC_DENY(__NR_socketcall, EACCES), #endif +#ifdef __NR_socket + SC_ALLOW(__NR_socket), +#endif #if defined(__NR_ioctl) && defined(__s390__) /* Allow ioctls for ICA crypto card on s390 */ SC_ALLOW_ARG(__NR_ioctl, 1, Z90STAT_STATUS_MASK),