whitelist munmap for seccomp.

free() may call munmap under the hood.
universal-ctags · Jun 27, 2017 · 3a6c6ff · 3a6c6ff
1 parent 69b2ad9
commit 3a6c6ff
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/main/seccomp.c b/main/seccomp.c
@@ -27,6 +27,7 @@ int installSyscallFilter (void)
 
 	// Memory allocation.
 	seccomp_rule_add (ctx, SCMP_ACT_ALLOW, SCMP_SYS (mmap), 0);
+	seccomp_rule_add (ctx, SCMP_ACT_ALLOW, SCMP_SYS (munmap), 0);
 	seccomp_rule_add (ctx, SCMP_ACT_ALLOW, SCMP_SYS (brk), 0);
 
 	// I/O