From 3b4b474ce869e4416db314df8669671a1c931a6f Mon Sep 17 00:00:00 2001
From: Eternity <1533512157@qq.com>
Date: Mon, 26 Jan 2026 16:32:58 +0800
Subject: [PATCH] fix(sandbox): prevent imports from being blocked when network
 is disabled

---
 sandbox/lib/seccomp_python/src/syscalls.rs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sandbox/lib/seccomp_python/src/syscalls.rs b/sandbox/lib/seccomp_python/src/syscalls.rs
index 07070d22..961fffac 100644
--- a/sandbox/lib/seccomp_python/src/syscalls.rs
+++ b/sandbox/lib/seccomp_python/src/syscalls.rs
@@ -10,6 +10,7 @@ pub static ALLOW_SYSCALLS: &[i32] = &[
     libc::SYS_ioctl as i32,
     libc::SYS_lseek as i32,
     libc::SYS_getdents64 as i32,
+    libc::SYS_fstat as i32,
 
     // thread
     libc::SYS_futex as i32,
@@ -77,7 +78,6 @@ pub static ALLOW_NETWORK_SYSCALLS: &[i32] = &[
     libc::SYS_sendmsg as i32,
     libc::SYS_sendmmsg as i32,
     libc::SYS_getsockopt as i32,
-    libc::SYS_fstat as i32,
     libc::SYS_fcntl as i32,
     libc::SYS_fstatfs as i32,
     libc::SYS_poll as i32,