b4b0233ba1
SDL enumerates connected input devices through libudev whenever a device is added or removed, which probes per-device metadata using `faccessat2` and `fstatfs`. These calls run after the seccomp filter is installed, and neither syscall was permitted, so connecting a gamepad killed the WebContent process with SIGSYS. We now permit `faccessat` alongside `faccessat2` because glibc's `faccessat` wrapper falls back to it on kernels without `faccessat2`. |
||
|---|---|---|
| .. | ||
| CMakeLists.txt | ||
| Sandbox.cpp | ||
| Sandbox.h | ||
| Seccomp.cpp | ||
| Seccomp.h | ||