containerd/contrib/seccomp
Sören Tempel adee2c7974 seccomp: add support for "swapcontext" syscall in default policy
This system call is only available on 32- and 64-bit PowerPC, it is used
by modern programming language implementations to implement coroutine
features through userspace context switches.

moby [1] and systemd nspawn [2] already whitelist this system call so it
makes sense to whitelist it in containerd as well.

[1]: https://github.com/moby/moby/pull/43092
[2]: https://github.com/systemd/systemd/pull/9487

Signed-off-by: Sören Tempel <soeren+git@soeren-tempel.net>
2022-01-07 18:05:59 +01:00
..
seccomp_default_unsupported.go Run go fmt with Go 1.17 2021-08-22 09:31:50 +09:00
seccomp_default.go seccomp: add support for "swapcontext" syscall in default policy 2022-01-07 18:05:59 +01:00
seccomp.go refactor: move from io/ioutil to io and os package 2021-09-21 09:50:38 +08:00