diff --git a/vmm/src/vm_config.rs b/vmm/src/vm_config.rs index aff0d95f3..96269bfb2 100644 --- a/vmm/src/vm_config.rs +++ b/vmm/src/vm_config.rs @@ -960,6 +960,11 @@ impl VmConfig { pub(crate) fn apply_landlock(&self) -> LandlockResult<()> { let mut landlock = Landlock::new()?; + #[cfg(target_arch = "aarch64")] + { + landlock.add_rule_with_access(Path::new("/sys/devices/system/cpu/cpu0/cache"), "r")?; + } + if let Some(mem_zones) = &self.memory.zones { for zone in mem_zones.iter() { zone.apply_landlock(&mut landlock)?;