seccomp sandbox: allow uname(3)

The uname(3) syscall is utilized by zlib-ng on RISC-V to decide whether
the kernel handles VILL bit of V extension properly (by checking the
kernel version against 6.5).

Allow it in the seccomp sandbox.

Signed-off-by: Icenowy Zheng <uwu@icenowy.me>

diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
index a0692dd2f5bda3042bdc53f70c211df5a23982f6..b3da8d5877b1bbbe75c3b9046013f41327b10536 100644 (file)
--- a/sandbox-seccomp-filter.c
+++ b/sandbox-seccomp-filter.c
@@ -435,6 +435,9 @@ static const struct sock_filter preauth_insns[] = {
 #ifdef __NR_getpeername
        SC_ALLOW(__NR_getpeername),
 #endif
+#ifdef __NR_uname
+       SC_ALLOW(__NR_uname),
+#endif
 #ifdef __NR_setsockopt
        SC_ALLOW_SETSOCKOPT(IPPROTO_IPV6, IPV6_TCLASS),
        SC_ALLOW_SETSOCKOPT(IPPROTO_IP, IP_TOS),