Block the "open_by_handle_at" system call

diff --git a/data/configs/waydroid.seccomp b/data/configs/waydroid.seccomp
index ae4761cbfbedbbf8fce61225c87e875b3dfeb671..212bd580d38fb97fb6d133613730707e8fae8184 100644 (file)
--- a/data/configs/waydroid.seccomp
+++ b/data/configs/waydroid.seccomp
@@ -7,6 +7,7 @@ _sysctl
 kexec_file_load
 kexec_load
 reboot
 kexec_file_load
 kexec_load
 reboot

+open_by_handle_at errno 38

 adjtimex errno 0
 clock_adjtime errno 0
 clock_adjtime64 errno 0
 adjtimex errno 0
 clock_adjtime errno 0
 clock_adjtime64 errno 0