From 3a56f20ee156a1c550dae98f5f57e3b3f8deb965 Mon Sep 17 00:00:00 2001 From: Rob Bradford Date: Sun, 22 Mar 2026 18:52:26 +0000 Subject: [PATCH] vmm: seccomp: Add readlink/readlinkat to vcpu filter Now needed for IOMMU group resolution with VFIO. Fixes: #7876 Signed-off-by: Rob Bradford --- vmm/src/seccomp_filters.rs | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/vmm/src/seccomp_filters.rs b/vmm/src/seccomp_filters.rs index 18b8ba097..d29576151 100644 --- a/vmm/src/seccomp_filters.rs +++ b/vmm/src/seccomp_filters.rs @@ -824,6 +824,10 @@ fn vcpu_thread_rules( (libc::SYS_pread64, vec![]), (libc::SYS_pwrite64, vec![]), (libc::SYS_read, vec![]), + #[cfg(target_arch = "x86_64")] + (libc::SYS_readlink, vec![]), + #[cfg(target_arch = "aarch64")] + (libc::SYS_readlinkat, vec![]), (libc::SYS_recvfrom, vec![]), (libc::SYS_recvmsg, vec![]), (libc::SYS_rt_sigaction, vec![]),