nspawn: allow cachestat systemcall

cachestat(2) is essentially a better variant of mincore(2). As mincore(2) is already allowed, also allow cachestat(2).
2026-03-02 09:29:27 +01:00
parent a12a4bdc9a
commit 93101e7ef0
1 changed files with 1 additions and 0 deletions
@@ -49,6 +49,7 @@ static int add_syscall_filters(
                /* Plus a good set of additional syscalls which are not part of any of the groups above */
                { 0,                  "arm_fadvise64_64"             },
                { 0,                  "brk"                          },
+                { 0,                  "cachestat"                    },
                { 0,                  "capget"                       },
                { 0,                  "capset"                       },
                { 0,                  "copy_file_range"              },