# HG changeset patch
# User Roy Marples <roy@marples.name>
# Date 1600683646 -3600
# Node ID 5de03fd31eb1af8cb7e9c804db4baf9bb62059b7
# Parent  d7a5671d08c52c4bd0ee5a9539bc247f79813603
privsep: Allow __NR_mmap for seccomp

Some malloc implementations might use it rather than brk.

diff -r d7a5671d08c5 -r 5de03fd31eb1 src/privsep-linux.c
--- a/src/privsep-linux.c	Sun Sep 20 21:22:49 2020 +0100
+++ b/src/privsep-linux.c	Mon Sep 21 11:20:46 2020 +0100
@@ -238,6 +238,9 @@
 	/* SECCOMP BPF is newer than nl80211 so we don't need SIOCGIWESSID
 	 * which lives in the impossible to include linux/wireless.h header */
 #endif
+#ifdef __NR_mmap
+	SECCOMP_ALLOW(__NR_mmap),
+#endif
 #ifdef __NR_munmap
 	SECCOMP_ALLOW(__NR_munmap),
 #endif