diff --git a/vmm/src/seccomp_filters.rs b/vmm/src/seccomp_filters.rs index 009dbdf29..326c44323 100644 --- a/vmm/src/seccomp_filters.rs +++ b/vmm/src/seccomp_filters.rs @@ -166,6 +166,12 @@ fn create_vmm_ioctl_seccomp_rule_common_mshv() -> Result, Backe MSHV_INITIALIZE_PARTITION() )?], and![Cond::new(1, ArgLen::Dword, Eq, MSHV_SET_GUEST_MEMORY())?], + and![Cond::new( + 1, + ArgLen::Dword, + Eq, + MSHV_GET_HOST_PARTITION_PROPERTY() + )?], and![Cond::new(1, ArgLen::Dword, Eq, MSHV_CREATE_VP())?], and![Cond::new(1, ArgLen::Dword, Eq, MSHV_IRQFD())?], and![Cond::new(1, ArgLen::Dword, Eq, MSHV_IOEVENTFD())?], @@ -173,7 +179,9 @@ fn create_vmm_ioctl_seccomp_rule_common_mshv() -> Result, Backe and![Cond::new(1, ArgLen::Dword, Eq, MSHV_GET_VP_REGISTERS())?], and![Cond::new(1, ArgLen::Dword, Eq, MSHV_SET_VP_REGISTERS())?], and![Cond::new(1, ArgLen::Dword, Eq, MSHV_RUN_VP())?], + #[cfg(target_arch = "x86_64")] and![Cond::new(1, ArgLen::Dword, Eq, MSHV_GET_VP_STATE())?], + #[cfg(target_arch = "x86_64")] and![Cond::new(1, ArgLen::Dword, Eq, MSHV_SET_VP_STATE())?], and![Cond::new( 1, @@ -194,6 +202,7 @@ fn create_vmm_ioctl_seccomp_rule_common_mshv() -> Result, Backe MSHV_GET_GPAP_ACCESS_BITMAP() )?], and![Cond::new(1, ArgLen::Dword, Eq, MSHV_VP_TRANSLATE_GVA())?], + #[cfg(target_arch = "x86_64")] and![Cond::new( 1, ArgLen::Dword, @@ -453,7 +462,7 @@ fn create_vmm_ioctl_seccomp_rule_kvm() -> Result, BackendError> Ok(common_rules) } -#[cfg(all(target_arch = "x86_64", feature = "mshv"))] +#[cfg(feature = "mshv")] fn create_vmm_ioctl_seccomp_rule_mshv() -> Result, BackendError> { create_vmm_ioctl_seccomp_rule_common(HypervisorType::Mshv) }