From 12758d7fad86344f220b9154a6d325c06774de75 Mon Sep 17 00:00:00 2001 From: Rob Bradford Date: Mon, 27 Apr 2020 15:18:05 +0100 Subject: [PATCH] vmm: seccomp: Add epoll_pwait syscall to permitted list This is needed for basic operation on the musl target. Signed-off-by: Rob Bradford --- vmm/src/seccomp_filters.rs | 2 ++ 1 file changed, 2 insertions(+) diff --git a/vmm/src/seccomp_filters.rs b/vmm/src/seccomp_filters.rs index 942518d1c..a7ac2011b 100644 --- a/vmm/src/seccomp_filters.rs +++ b/vmm/src/seccomp_filters.rs @@ -202,6 +202,7 @@ pub fn vmm_thread_filter() -> Result { allow_syscall(libc::SYS_dup), allow_syscall(libc::SYS_epoll_create1), allow_syscall(libc::SYS_epoll_ctl), + allow_syscall(libc::SYS_epoll_pwait), allow_syscall(libc::SYS_epoll_wait), allow_syscall(libc::SYS_eventfd2), allow_syscall(libc::SYS_execve), @@ -279,6 +280,7 @@ pub fn api_thread_filter() -> Result { allow_syscall(libc::SYS_dup), allow_syscall(libc::SYS_epoll_create1), allow_syscall(libc::SYS_epoll_ctl), + allow_syscall(libc::SYS_epoll_pwait), allow_syscall(libc::SYS_epoll_wait), allow_syscall(libc::SYS_exit), allow_syscall(libc::SYS_futex),