bin/podman-vscodium: enable Landlock and symlink syscalls

codium is using Landlock: SECCOMP syscall=444 (landlock_create_ruleset) exe='/usr/share/codium/codium' comm='codium' cargo is now using symlink: SECCOMP syscall=88 (symlink) exe='/home/user/.rustup/toolchains/nightly-2024-11-19-x86_64-unknown-linux-gnu/bin/cargo' comm='cargo'
fishilico · Jan 8, 2025 · c32028e · c32028e
1 parent aa7c2f4
commit c32028e
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/bin/podman-vscodium b/bin/podman-vscodium
@@ -187,6 +187,7 @@ SECCOMP_PROFILE='
                 "inotify_rm_watch",
                 "ioctl",
                 "kill",
+                "landlock_create_ruleset",
                 "link",
                 "linkat",
                 "listen",
@@ -256,6 +257,7 @@ SECCOMP_PROFILE='
                 "stat",
                 "statfs",
                 "statx",
+                "symlink",
                 "sysinfo",
                 "tgkill",
                 "umask",