dsg/cloud-hypervisor
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

seccomp: Allow clock_gettime() on http api thread

Browse source 
Signed-off-by: Stefan Kober <stefan.kober@cyberus-technology.de>
This commit is contained in:
Stefan Kober 2025-02-28 13:32:18 +01:00 • committed by Rob Bradford
parent 9e1fb3bfa1
commit 03bb59db69
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
vmm/src/seccomp_filters.rs
View file

@ -825,6 +825,7 @@ fn http_api_thread_rules() -> Result<Vec<(i64, Vec<SeccompRule>)>, BackendError>
Ok(vec![
(libc::SYS_accept4, vec![]),
(libc::SYS_brk, vec![]),
(libc::SYS_clock_gettime, vec![]),
(libc::SYS_close, vec![]),
(libc::SYS_dup, vec![]),
(libc::SYS_epoll_create1, vec![]),