From 0ebbb3f8a2c90c1095dfa6ae64c10f7e71ab328a Mon Sep 17 00:00:00 2001 From: Alyssa Ross Date: Fri, 21 Apr 2023 16:05:32 +0000 Subject: [PATCH] vmm: allow getdents64 in seccomp filter This is used on older kernels where close_range() is not available. Signed-off-by: Alyssa Ross Fixes: 505f4dfa ("vmm: close all unused fds in sigwinch listener") --- vmm/src/seccomp_filters.rs | 1 + 1 file changed, 1 insertion(+) diff --git a/vmm/src/seccomp_filters.rs b/vmm/src/seccomp_filters.rs index e0e77939f..9c11b8754 100644 --- a/vmm/src/seccomp_filters.rs +++ b/vmm/src/seccomp_filters.rs @@ -530,6 +530,7 @@ fn vmm_thread_rules( #[cfg(target_arch = "aarch64")] (libc::SYS_newfstatat, vec![]), (libc::SYS_futex, vec![]), + (libc::SYS_getdents64, vec![]), (libc::SYS_getpgid, vec![]), #[cfg(target_arch = "x86_64")] (libc::SYS_getpgrp, vec![]),