From 46d972e40240a29b630a7324c870054b105676a4 Mon Sep 17 00:00:00 2001 From: Sebastien Boeuf Date: Tue, 15 Sep 2020 16:24:21 +0200 Subject: [PATCH] virtio-devices: mem: Add missing syscall to seccomp filters The missing syscall rt_sigprocmask(2) was triggered for the musl build upon rebooting the VM, and was causing the VM to be killed. Signed-off-by: Sebastien Boeuf --- virtio-devices/src/seccomp_filters.rs | 1 + 1 file changed, 1 insertion(+) diff --git a/virtio-devices/src/seccomp_filters.rs b/virtio-devices/src/seccomp_filters.rs index 484495bde..edd237bc2 100644 --- a/virtio-devices/src/seccomp_filters.rs +++ b/virtio-devices/src/seccomp_filters.rs @@ -194,6 +194,7 @@ fn virtio_mem_thread_rules() -> Result, Error> { allow_syscall(libc::SYS_madvise), allow_syscall(libc::SYS_munmap), allow_syscall(libc::SYS_read), + allow_syscall(libc::SYS_rt_sigprocmask), allow_syscall(libc::SYS_sigaltstack), allow_syscall(libc::SYS_write), ])