seccomp: disable clone2

2 years ago · 53d17aa4e1
2 changed files with 10 additions and 0 deletions
--- a/nfq/sec.c
+++ b/nfq/sec.c
@ -30,7 +30,12 @@ SYS_execve,SYS_execveat,
 #ifdef SYS_exec_with_loader
 SYS_exec_with_loader,
 #endif
+#ifdef SYS_clone
 SYS_clone,
+#endif
+#ifdef SYS_clone2
+SYS_clone2,
+#endif
 #ifdef SYS_clone3
 SYS_clone3,
 #endif
--- a/tpws/sec.c
+++ b/tpws/sec.c
@ -30,7 +30,12 @@ SYS_execve,SYS_execveat,
 #ifdef SYS_exec_with_loader
 SYS_exec_with_loader,
 #endif
+#ifdef SYS_clone
 SYS_clone,
+#endif
+#ifdef SYS_clone2
+SYS_clone2,
+#endif
 #ifdef SYS_clone3
 SYS_clone3,
 #endif