fix(sandbox): prevent imports from being blocked when network is disabled

2026-01-26 16:32:58 +08:00
parent 85681db7b7
commit 3b4b474ce8
1 changed files with 1 additions and 1 deletions
--- a/sandbox/lib/seccomp_python/src/syscalls.rs
+++ b/sandbox/lib/seccomp_python/src/syscalls.rs
@@ -10,6 +10,7 @@ pub static ALLOW_SYSCALLS: &[i32] = &[
    libc::SYS_ioctl as i32,
    libc::SYS_lseek as i32,
    libc::SYS_getdents64 as i32,
+    libc::SYS_fstat as i32,

    // thread
    libc::SYS_futex as i32,
@@ -77,7 +78,6 @@ pub static ALLOW_NETWORK_SYSCALLS: &[i32] = &[
    libc::SYS_sendmsg as i32,
    libc::SYS_sendmmsg as i32,
    libc::SYS_getsockopt as i32,
-    libc::SYS_fstat as i32,
    libc::SYS_fcntl as i32,
    libc::SYS_fstatfs as i32,
    libc::SYS_poll as i32,