commit adbb5b4d39909abdc8791fa5b5414deff938770f
author Antonio Murdaca <runcom@redhat.com> Mon Mar 20 11:00:34 2017 +0100
committer Kenfe-Mickael Laventure <mickael.laventure@gmail.com> Thu May 18 22:39:26 2017 -0700
tree 3a722b287ea2ca017352ac31005021f618453a8f
parent 9ef54c654ba61fd10b4c3322ccd31ccd45dc9b38

profiles: seccomp: allow clock_settime when CAP_SYS_TIME is added

Signed-off-by: Antonio Murdaca <runcom@redhat.com>
(cherry picked from commit 3ab4961032315abb4fd4ed813034a114d1d55699)

profiles/seccomp/default.json

diff --git a/profiles/seccomp/default.json b/profiles/seccomp/default.json
index 932aa55..006592f 100755
--- a/profiles/seccomp/default.json
+++ b/profiles/seccomp/default.json
@@ -898,7 +898,8 @@
 			"names": [
 				"settimeofday",
 				"stime",
-				"adjtimex"
+				"adjtimex",
+				"clock_settime"
 			],
 			"action": "SCMP_ACT_ALLOW",
 			"args": [],

profiles/seccomp/seccomp_default.go

diff --git a/profiles/seccomp/seccomp_default.go b/profiles/seccomp/seccomp_default.go
index dee189a..e3943f8 100644
--- a/profiles/seccomp/seccomp_default.go
+++ b/profiles/seccomp/seccomp_default.go
@@ -733,6 +733,7 @@
 				"settimeofday",
 				"stime",
 				"adjtimex",
+				"clock_settime",
 			},
 			Action: types.ActAllow,
 			Args:   []*types.Arg{},