From 17072e9a6f8c0c7fda5704effebbaafe9f89c790 Mon Sep 17 00:00:00 2001 From: Rob Bradford Date: Mon, 12 Apr 2021 16:04:58 +0100 Subject: [PATCH] vmm: seccomp: Add missing SYS_newfstatat This is used when running on a new libc like Fedora34. Signed-off-by: Rob Bradford --- vmm/src/seccomp_filters.rs | 2 ++ 1 file changed, 2 insertions(+) diff --git a/vmm/src/seccomp_filters.rs b/vmm/src/seccomp_filters.rs index 42b2d0342..47208ea31 100644 --- a/vmm/src/seccomp_filters.rs +++ b/vmm/src/seccomp_filters.rs @@ -344,6 +344,7 @@ fn vmm_thread_rules() -> Result, Error> { allow_syscall(libc::SYS_mremap), allow_syscall(libc::SYS_munmap), allow_syscall(libc::SYS_nanosleep), + allow_syscall(libc::SYS_newfstatat), #[cfg(target_arch = "x86_64")] allow_syscall(libc::SYS_open), allow_syscall(libc::SYS_openat), @@ -432,6 +433,7 @@ fn vcpu_thread_rules() -> Result, Error> { allow_syscall(libc::SYS_mprotect), allow_syscall(libc::SYS_munmap), allow_syscall(libc::SYS_nanosleep), + allow_syscall(libc::SYS_newfstatat), #[cfg(target_arch = "x86_64")] allow_syscall(libc::SYS_open), allow_syscall(libc::SYS_openat),