From 4299815a672be026aa29ceffaf6ffe943aefc71b Mon Sep 17 00:00:00 2001 From: Wenyu Huang Date: Sun, 25 Aug 2024 10:49:13 -0400 Subject: [PATCH] vmm: allow to call fcntl in debug This fixes a issue of running vm compiled in debug with Rust 1.80.0 or later, where this check was introduced. Signed-off-by: Wenyu Huang --- virtio-devices/src/seccomp_filters.rs | 2 ++ vmm/src/seccomp_filters.rs | 6 ++++++ 2 files changed, 8 insertions(+) diff --git a/virtio-devices/src/seccomp_filters.rs b/virtio-devices/src/seccomp_filters.rs index c4896d5cf..2bdfebb37 100644 --- a/virtio-devices/src/seccomp_filters.rs +++ b/virtio-devices/src/seccomp_filters.rs @@ -270,6 +270,8 @@ fn virtio_thread_common() -> Vec<(i64, Vec)> { (libc::SYS_rt_sigreturn, vec![]), (libc::SYS_sigaltstack, vec![]), (libc::SYS_write, vec![]), + #[cfg(debug_assertions)] + (libc::SYS_fcntl, vec![]), ] } diff --git a/vmm/src/seccomp_filters.rs b/vmm/src/seccomp_filters.rs index b8feb81d0..4782960a4 100644 --- a/vmm/src/seccomp_filters.rs +++ b/vmm/src/seccomp_filters.rs @@ -488,6 +488,8 @@ fn signal_handler_thread_rules() -> Result)>, Backend (libc::SYS_sendto, vec![]), (libc::SYS_sigaltstack, vec![]), (libc::SYS_write, vec![]), + #[cfg(debug_assertions)] + (libc::SYS_fcntl, vec![]), ]) } @@ -520,6 +522,8 @@ fn pty_foreground_thread_rules() -> Result)>, Backend (libc::SYS_setsid, vec![]), (libc::SYS_sigaltstack, vec![]), (libc::SYS_write, vec![]), + #[cfg(debug_assertions)] + (libc::SYS_fcntl, vec![]), ]) } @@ -802,6 +806,8 @@ fn vcpu_thread_rules( (libc::SYS_unlinkat, vec![]), (libc::SYS_write, vec![]), (libc::SYS_writev, vec![]), + #[cfg(debug_assertions)] + (libc::SYS_fcntl, vec![]), ]) }