From 596d6453c5a651ab289f085fa1110adaa7baae5e Mon Sep 17 00:00:00 2001 From: Bo Chen Date: Thu, 8 May 2025 17:27:33 -0700 Subject: [PATCH] vmm: Allow 'VFIO_IOMMU_MAP_DMA' ioctl from the vcpu worker thread Signed-off-by: Bo Chen --- vmm/src/seccomp_filters.rs | 1 + 1 file changed, 1 insertion(+) diff --git a/vmm/src/seccomp_filters.rs b/vmm/src/seccomp_filters.rs index 326c44323..66b91c399 100644 --- a/vmm/src/seccomp_filters.rs +++ b/vmm/src/seccomp_filters.rs @@ -760,6 +760,7 @@ fn create_vcpu_ioctl_seccomp_rule( let mut rules = or![ and![Cond::new(1, ArgLen::Dword, Eq, VFIO_DEVICE_SET_IRQS)?], and![Cond::new(1, ArgLen::Dword, Eq, VFIO_GROUP_UNSET_CONTAINER)?], + and![Cond::new(1, ArgLen::Dword, Eq, VFIO_IOMMU_MAP_DMA)?], and![Cond::new(1, ArgLen::Dword, Eq, VFIO_IOMMU_UNMAP_DMA)?], and![Cond::new(1, ArgLen::Dword, Eq, VHOST_VDPA_SET_STATUS)?], and![Cond::new(1, ArgLen::Dword, Eq, VHOST_VDPA_GET_CONFIG)?],