add epoll_pwait to secomp profile

Henry Oswald · Henry Oswald · commit 12fee9e4dfc6 · 2019-01-24T12:30:37.000Z
Last year golang changed from epoll_wait to epoll_pwait golang/go#23750 This causes golang panic errors on mac when running secomp secure compiles using docker 18.09.1. It may start to become a problem on linux where we are running on 17.03.2-ce in production.
diff --git a/seccomp/clsi-profile.json b/seccomp/clsi-profile.json
@@ -827,6 +827,10 @@
           "name": "gettimeofday",
           "action": "SCMP_ACT_ALLOW",
           "args": []
+        }, {
+          "name": "epoll_pwait",
+          "action": "SCMP_ACT_ALLOW",
+          "args": []
         }
     ]
 }

Original file line number	Diff line number	Diff line change
`@@ -827,6 +827,10 @@`
`827`	`827`	`"name": "gettimeofday",`
`828`	`828`	`"action": "SCMP_ACT_ALLOW",`
`829`	`829`	`"args": []`
	`830`	`+ }, {`
	`831`	`+ "name": "epoll_pwait",`
	`832`	`+ "action": "SCMP_ACT_ALLOW",`
	`833`	`+ "args": []`
`830`	`834`	`}`
`831`	`835`	`]`
`832`	`836`	`}`