github/containerd
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity

Merge pull request #9684 from AkihiroSuda/seccomp-6.7

Browse Source 
seccomp: kernel 6.7
This commit is contained in:
Phil Estes 2024-01-25 19:07:42 +00:00 committed by GitHub
commit a2d0ddc88e
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
contrib/seccomp/seccomp_default.go
View File

@ -64,6 +64,7 @@ func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp {
"alarm", "alarm",
"bind", "bind",
"brk", "brk",
"cachestat", // kernel v6.5, libseccomp v2.5.5
"capget", "capget",
"capset", "capset",
"chdir", "chdir",
@ -109,6 +110,7 @@ func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp {
"fchdir", "fchdir",
"fchmod", "fchmod",
"fchmodat", "fchmodat",
"fchmodat2", // kernel v6.6, libseccomp v2.5.5
"fchown", "fchown",
"fchown32", "fchown32",
"fchownat", "fchownat",
@ -130,8 +132,11 @@ func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp {
"ftruncate", "ftruncate",
"ftruncate64", "ftruncate64",
"futex", "futex",
"futex_requeue", // kernel v6.7, libseccomp v2.5.5
"futex_time64", "futex_time64",
"futex_wait", // kernel v6.7, libseccomp v2.5.5
"futex_waitv", "futex_waitv",
"futex_wake", // kernel v6.7, libseccomp v2.5.5
"futimesat", "futimesat",
"getcpu", "getcpu",
"getcwd", "getcwd",
@ -214,6 +219,7 @@ func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp {
"mlock", "mlock",
"mlock2", "mlock2",
"mlockall", "mlockall",
"map_shadow_stack", // kernel v6.6, libseccomp v2.5.5
"mmap", "mmap",
"mmap2", "mmap2",
"mprotect", "mprotect",
@ -671,6 +677,7 @@ func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp {
"get_mempolicy", "get_mempolicy",
"mbind", "mbind",
"set_mempolicy", "set_mempolicy",
"set_mempolicy_home_node", // kernel v5.17, libseccomp v2.5.4
}, },
Action: specs.ActAllow, Action: specs.ActAllow,
Args: []specs.LinuxSeccompArg{}, Args: []specs.LinuxSeccompArg{},