vmm: seccomp: Allow SYS_rseq as required by newer glibc
glibc 2.35 as shipped by Fedora 36 now uses the rseq syscall. Signed-off-by: Rob Bradford <robert.bradford@intel.com>
This commit is contained in:
parent
c274ce4d49
commit
4a04d1f8f2
1 changed files with 6 additions and 0 deletions
|
|
@ -546,6 +546,12 @@ fn vmm_thread_rules() -> Result<Vec<(i64, Vec<SeccompRule>)>, BackendError> {
|
|||
(libc::SYS_recvfrom, vec![]),
|
||||
(libc::SYS_recvmsg, vec![]),
|
||||
(libc::SYS_restart_syscall, vec![]),
|
||||
// musl is missing this constant
|
||||
// (libc::SYS_rseq, vec![]),
|
||||
#[cfg(target_arch = "x86_64")]
|
||||
(334, vec![]),
|
||||
#[cfg(target_arch = "aarch64")]
|
||||
(293, vec![]),
|
||||
(libc::SYS_rt_sigaction, vec![]),
|
||||
(libc::SYS_rt_sigprocmask, vec![]),
|
||||
(libc::SYS_rt_sigreturn, vec![]),
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue