commit - 4c857c0afcb7d76cb03323ba7d0dfef60b27589f
commit + 6827d2781e8aaaa6aad1e32026a21863070c90f4
blob - d71ac08818023c1f1c05eae45f6367337d19b6b6
blob + 5ac0c783dd1596c4baa5198ed89b134917f3e3b0
--- sandbox.c
+++ sandbox.c
SC_ALLOW(read),
SC_ALLOW(openat),
SC_ALLOW(fstat),
+ SC_ALLOW(newfstatat),
SC_ALLOW(close),
SC_ALLOW(lseek),
SC_ALLOW(brk),
/* void on aarch64 does a gettrandom */
SC_ALLOW(getrandom),
+
+ /* arch on amd64 */
+ SC_ALLOW(gettimeofday),
/* for directory listing */
SC_ALLOW(getdents64),