Add sigprocmask to default seccomp profile

crosbymichael · thaJeztah · commit dc418d040fac · 2019-09-12T10:25:44.000+02:00
Signed-off-by: Michael Crosby &lt;crosbymichael@gmail.com&gt;
(cherry picked from commit e4605cc2a5624f0eb7922cce4d182f3b1ee73e4d)
Signed-off-by: Sebastiaan van Stijn &lt;github@gone.nl&gt;
Upstream-commit: 40e3647f2f5205ed205ec9353194d49bcb638971
Component: engine
diff --git a/components/engine/profiles/seccomp/default.json b/components/engine/profiles/seccomp/default.json
@@ -314,6 +314,7 @@
 				"sigaltstack",
 				"signalfd",
 				"signalfd4",
+				"sigprocmask",
 				"sigreturn",
 				"socket",
 				"socketcall",
diff --git a/components/engine/profiles/seccomp/seccomp_default.go b/components/engine/profiles/seccomp/seccomp_default.go
@@ -307,6 +307,7 @@ func DefaultProfile() *types.Seccomp {
 				"sigaltstack",
 				"signalfd",
 				"signalfd4",
+				"sigprocmask",
 				"sigreturn",
 				"socket",
 				"socketcall",
