seccomp: drop getrandom() from @system-service
authorLennart Poettering <lennart@poettering.net>
Tue, 27 Jul 2021 15:10:21 +0000 (17:10 +0200)
committerZbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
Fri, 6 Aug 2021 11:07:58 +0000 (13:07 +0200)
It's included in @default now, since
14f4b1b568907350d023d1429c1aa4aaa8925f22, and since @system-service
pulls that in we can drop it from @system-service.

Follow-up for #20191

(cherry picked from commit 67347f37407489a68e12da8f75b78ae1d1168de9)
(cherry picked from commit 3eb4dc295ae9b853450e4823c8be7dbf8ccdbd43)
(cherry picked from commit cb09a479dedf84c7e9a43c976066557de943fabe)
(cherry picked from commit 425fc95880723ba3402b54b6610bf267004df955)

src/shared/seccomp-util.c

index d5b1b9d0108390d32daac79765a1cb2e9feecc9e..638779570bf4b68948af32cd8d64532d2d695817 100644 (file)
@@ -834,7 +834,6 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
                 "get_mempolicy\0"
                 "getcpu\0"
                 "getpriority\0"
-                "getrandom\0"
                 "ioctl\0"
                 "ioprio_get\0"
                 "kcmp\0"