seccomp: allow sendto for vsock thread
as of rust 1.90, writes to unix socket streams use send_with_flags instead of write, so it uses a sendto syscall instead of write. Signed-off-by: Matt Moriarity <matt@mattmoriarity.com>
This commit is contained in:
parent
02da2f2d36
commit
ec57aade15
1 changed files with 1 additions and 0 deletions
|
|
@ -239,6 +239,7 @@ fn virtio_vsock_thread_rules() -> Vec<(i64, Vec<SeccompRule>)> {
|
|||
(libc::SYS_connect, vec![]),
|
||||
(libc::SYS_ioctl, create_vsock_ioctl_seccomp_rule()),
|
||||
(libc::SYS_recvfrom, vec![]),
|
||||
(libc::SYS_sendto, vec![]),
|
||||
(libc::SYS_socket, vec![]),
|
||||
// If debug_assertions is enabled, closing a file first checks
|
||||
// whether the FD is valid with fcntl.
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue