From 9396ea69d4602053f84ab44451bd2d944c4d0dff Mon Sep 17 00:00:00 2001 From: Moe-hacker Date: Wed, 18 Dec 2024 09:02:26 +0000 Subject: [PATCH] Fix Built-in Seccomp profile --- src/seccomp.c | 1 - 1 file changed, 1 deletion(-) diff --git a/src/seccomp.c b/src/seccomp.c index 8440ddb..8d66905 100644 --- a/src/seccomp.c +++ b/src/seccomp.c @@ -90,7 +90,6 @@ void ruri_setup_seccomp(const struct RURI_CONTAINER *_Nonnull container) seccomp_rule_add(ctx, SCMP_ACT_KILL, SCMP_SYS(kcmp), 0); seccomp_rule_add(ctx, SCMP_ACT_KILL, SCMP_SYS(process_vm_readv), 0); seccomp_rule_add(ctx, SCMP_ACT_KILL, SCMP_SYS(process_vm_writev), 0); - seccomp_rule_add(ctx, SCMP_ACT_KILL, SCMP_SYS(ptrace), 0); } if (ruri_is_in_caplist(container->drop_caplist, CAP_SYS_BOOT)) { seccomp_rule_add(ctx, SCMP_ACT_KILL, SCMP_SYS(kexec_file_load), 0);