Add openat syscall to exceptions, remove 1-sec-evil test

Author: b-chmiel

src/seccomp/policy/DefaultPolicy.cc

@@ -43,7 +43,8 @@ void DefaultPolicy::addExecutionControlRules(bool allowFork) {
              "sigsuspend",
              "clock_nanosleep",
              "open",
-             "epoll_create1"});
+             "epoll_create1",
+             "openat"});
 
     rules_.emplace_back(SeccompRule(
             "set_thread_area", action::ActionTrace([](auto& /* tracee */) {

test/src/1-sec-evil.c

@@ -7,10 +7,8 @@ SET(CMAKE_CXX_FLAGS_RELEASE "")
 
 # Time tests
 ADD_EXECUTABLE(1-sec-prog 1-sec-prog.c)
-ADD_EXECUTABLE(1-sec-evil 1-sec-evil.c)
 ADD_EXECUTABLE(infinite-loop infinite-loop.c)
 SET_TARGET_PROPERTIES(1-sec-prog
-                      1-sec-evil
                       infinite-loop
                       PROPERTIES COMPILE_FLAGS "-m32"
                                  LINK_FLAGS "-m32")
@@ -48,7 +46,7 @@ ADD_EXECUTABLE(stderr-write stderr-write.c)
 
 ADD_CUSTOM_TARGET(test-binaries
     DEPENDS
-        1-sec-prog 1-sec-evil infinite-loop 1-sec-prog-th
+        1-sec-prog infinite-loop 1-sec-prog-th
         leak-tiny_32 leak-huge_32 leak-dive_32
         leak-tiny_64 leak-huge_64 leak-dive_64
         sum_c sum_cxx stderr-write)

test/src/CMakeLists.txt

@@ -1,5 +1,5 @@
 #!/usr/bin/python3.9
 
-import numpy as np
+import numpy
 
-print(np.sum(list(map(int, input().split()))))
+print(numpy.sum(list(map(int, input().split()))))