diff --git a/services/modules/seccomp/seccomp_policy/renderer_arm.seccomp.policy b/services/modules/seccomp/seccomp_policy/renderer_arm.seccomp.policy index 5f8b7d80d52ae00c0f7c32a5e30ac8ab18ebe1c7..f39ba2e527d8d7cf2a7e085126c0f4e0bbaa6f08 100644 --- a/services/modules/seccomp/seccomp_policy/renderer_arm.seccomp.policy +++ b/services/modules/seccomp/seccomp_policy/renderer_arm.seccomp.policy @@ -169,6 +169,7 @@ fstatfs setsid rt_tgsigqueueinfo ptrace +membarrier @allowListWithArgs getrusage:if arg0 == RUSAGE_SELF || arg0 == RUSAGE_THREAD; return ALLOW; else return KILL_PROCESS; diff --git a/services/modules/seccomp/seccomp_policy/renderer_arm64.seccomp.policy b/services/modules/seccomp/seccomp_policy/renderer_arm64.seccomp.policy index 44ec3b6891f6d129c72b642054930f915d7cce74..d7bf5fabaf6d82c30d6c7af283d61ca7fc1dcf8d 100644 --- a/services/modules/seccomp/seccomp_policy/renderer_arm64.seccomp.policy +++ b/services/modules/seccomp/seccomp_policy/renderer_arm64.seccomp.policy @@ -138,6 +138,7 @@ fstatfs setsid rt_tgsigqueueinfo ptrace +membarrier @allowListWithArgs getrusage:if arg0 == RUSAGE_SELF || arg0 == RUSAGE_THREAD; return ALLOW; else return KILL_PROCESS;