nspawn: Include arm_fadvise64_64 in syscall allow_list
authorMichał Górny <mgorny@gentoo.org>
Sun, 17 Nov 2024 15:34:35 +0000 (16:34 +0100)
committerYu Watanabe <watanabe.yu+github@gmail.com>
Mon, 18 Nov 2024 02:43:35 +0000 (11:43 +0900)
commit7fd70a532681c0ea4cd6ff04d1a7950dae3efc8c
tree7528a3465326031833118fdfd34f29d03cb4de87
parent2b60615a41f8afa47a52850ad351ada125f2d7e2
nspawn: Include arm_fadvise64_64 in syscall allow_list

Add the `arm_fadvise64_64` syscall to the allow_list, in addition
to the existing `fadvise64` and `fadvise64_64` syscalls, as this is
the syscall actually defined for `arm` architecture.  Adding it fixes
the syscall being rejected in arm32 containers.

Fixes #35194
src/nspawn/nspawn-seccomp.c