From 2a5c976255b2bf1ff3203e09cdf83272804930e9 Mon Sep 17 00:00:00 2001 From: Adam Jensen Date: Sat, 20 Jan 2024 21:50:59 -0500 Subject: [PATCH] seccomp: Allow syscalls needed for cloning EventFD Signed-off-by: Adam Jensen --- resources/seccomp/aarch64-unknown-linux-musl.json | 12 ++++++++++++ resources/seccomp/x86_64-unknown-linux-musl.json | 12 ++++++++++++ 2 files changed, 24 insertions(+) diff --git a/resources/seccomp/aarch64-unknown-linux-musl.json b/resources/seccomp/aarch64-unknown-linux-musl.json index 4302a87c3a9d..a4f6b58a2ac5 100644 --- a/resources/seccomp/aarch64-unknown-linux-musl.json +++ b/resources/seccomp/aarch64-unknown-linux-musl.json @@ -1041,6 +1041,18 @@ { "syscall": "sendmsg", "comment": "Used by vhost-user frontend to communicate with the backend" + }, + { + "syscall": "dup", + "comment": "Used when resetting VirtIO devices" + }, + { + "syscall": "fcntl", + "comment": "Used when resetting VirtIO devices" + }, + { + "syscall": "readlink", + "comment": "Used when resetting VirtIO devices" } ] } diff --git a/resources/seccomp/x86_64-unknown-linux-musl.json b/resources/seccomp/x86_64-unknown-linux-musl.json index a735997383f0..75c5d8f5ba0a 100644 --- a/resources/seccomp/x86_64-unknown-linux-musl.json +++ b/resources/seccomp/x86_64-unknown-linux-musl.json @@ -1245,6 +1245,18 @@ { "syscall": "sendmsg", "comment": "Used by vhost-user frontend to communicate with the backend" + }, + { + "syscall": "dup", + "comment": "Used when resetting VirtIO devices" + }, + { + "syscall": "fcntl", + "comment": "Used when resetting VirtIO devices" + }, + { + "syscall": "readlink", + "comment": "Used when resetting VirtIO devices" } ] }