commit e3d81f49cc4084f6af16a497cf56d15d79d1c1b8
from: Omar Polo <op@omarpolo.com>
date: Sat Mar 20 09:24:44 2021 UTC

[seccomp] allow prlimit64

it's needed by getdtablesize, at least on glibc

commit - d632468df510578999cf3e34f422728e879d7286
commit + e3d81f49cc4084f6af16a497cf56d15d79d1c1b8
blob - 509d6bbc5009502ddf3e4bc8b66f7fec22586888
blob + 1a0dc9a4253a1896cf6f058905221d02c6e11def
--- sandbox.c
+++ sandbox.c
@@ -182,6 +182,7 @@ sandbox_server_process(void)
 
 		/* for imsg */
 		SC_ALLOW(sendmsg),
+		SC_ALLOW(prlimit64),
 
 		/* needed for signal handling */
 		SC_ALLOW(rt_sigreturn),