From 03bb59db69cde6aabc1965f9bb0fa08efcfd00eb Mon Sep 17 00:00:00 2001
From: Stefan Kober <stefan.kober@cyberus-technology.de>
Date: Fri, 28 Feb 2025 13:32:18 +0100
Subject: [PATCH] seccomp: Allow clock_gettime() on http api thread

Signed-off-by: Stefan Kober <stefan.kober@cyberus-technology.de>
---
 vmm/src/seccomp_filters.rs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/vmm/src/seccomp_filters.rs b/vmm/src/seccomp_filters.rs
index 47dbaf21a..3df3070c9 100644
--- a/vmm/src/seccomp_filters.rs
+++ b/vmm/src/seccomp_filters.rs
@@ -825,6 +825,7 @@ fn http_api_thread_rules() -> Result<Vec<(i64, Vec<SeccompRule>)>, BackendError>
     Ok(vec![
         (libc::SYS_accept4, vec![]),
         (libc::SYS_brk, vec![]),
+        (libc::SYS_clock_gettime, vec![]),
         (libc::SYS_close, vec![]),
         (libc::SYS_dup, vec![]),
         (libc::SYS_epoll_create1, vec![]),