Cherry-pick elastic#20054 to 7.9: [Filebeat] Chmod/Chown seccomp fix (e…

…lastic#20061) * [Filebeat] Chmod/Chown seccomp fix (elastic#20054) * Fix fchmod syscall seccomp policy * Fix chown * Add changelog entry (cherry picked from commit f4b2c48) * Fix changelog
leweafan · Jul 22, 2020 · 888d4d0 · 888d4d0
1 parent ff53753
commit 888d4d0
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 0 deletions.
diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc
@@ -89,6 +89,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
 - Fix goroutine leak and Elasticsearch output file descriptor leak when output reloading is in use. {issue}10491[10491] {pull}17381[17381]
 - Fix Elasticsearch license endpoint URL referenced in error message. {issue}17880[17880] {pull}18030[18030]
 - Change `decode_json_fields` processor, to merge parsed json objects with existing objects in the event instead of fully replacing them. {pull}17958[17958]
+- Fix seccomp policy for calls to `chmod` and `chown`. {pull}20054[20054]
 
 *Auditbeat*
 

diff --git a/libbeat/common/seccomp/policy_linux_386.go b/libbeat/common/seccomp/policy_linux_386.go
@@ -46,7 +46,9 @@ func init() {
 					"exit_group",
 					"fchdir",
 					"fchmod",
+					"fchmodat",
 					"fchown32",
+					"fchownat",
 					"fcntl",
 					"fcntl64",
 					"fdatasync",

diff --git a/libbeat/common/seccomp/policy_linux_amd64.go b/libbeat/common/seccomp/policy_linux_amd64.go
@@ -51,7 +51,9 @@ func init() {
 					"exit_group",
 					"fchdir",
 					"fchmod",
+					"fchmodat",
 					"fchown",
+					"fchownat",
 					"fcntl",
 					"fdatasync",
 					"flock",