virtio-devices: seccomp_filters: Add fsync to block io_uring filter

This is required when booting with hypervisor-fw. Signed-off-by: Rob Bradford <robert.bradford@intel.com>
2020-10-27 09:12:12 +00:00 · 2020-10-27 09:12:12 +00:00 · 6d4656c68f
commit 6d4656c68f
parent 338521c700
1 changed files with 1 additions and 0 deletions
--- a/virtio-devices/src/seccomp_filters.rs
+++ b/virtio-devices/src/seccomp_filters.rs
@ -127,6 +127,7 @@ fn virtio_blk_io_uring_thread_rules() -> Result<Vec<SyscallRuleSet>, Error> {
        #[cfg(target_arch = "x86_64")]
        allow_syscall(libc::SYS_epoll_wait),
        allow_syscall(libc::SYS_exit),
+        allow_syscall(libc::SYS_fsync),
        allow_syscall(libc::SYS_futex),
        allow_syscall(SYS_IO_URING_ENTER),
        allow_syscall(libc::SYS_madvise),