From 68fc432978aa8fc31ad95e09c801cf8f3395c1cc Mon Sep 17 00:00:00 2001 From: Sebastien Boeuf Date: Fri, 15 May 2020 10:45:49 +0200 Subject: [PATCH] vmm: Update seccomp filters with clock_nanosleep The clock_nanosleep system call needs to be whitelisted since the commit 12e00c0f4539879be4622da93f941035c14561ae introduced the use of a sleep() function. Without this patch, we can see an error when the VM is paused or killed. Signed-off-by: Sebastien Boeuf --- vmm/src/seccomp_filters.rs | 1 + 1 file changed, 1 insertion(+) diff --git a/vmm/src/seccomp_filters.rs b/vmm/src/seccomp_filters.rs index dcb3f3faf..5b1765852 100644 --- a/vmm/src/seccomp_filters.rs +++ b/vmm/src/seccomp_filters.rs @@ -196,6 +196,7 @@ pub fn vmm_thread_filter() -> Result { allow_syscall(libc::SYS_bind), allow_syscall(libc::SYS_brk), allow_syscall(libc::SYS_clock_gettime), + allow_syscall(libc::SYS_clock_nanosleep), allow_syscall(libc::SYS_clone), allow_syscall(libc::SYS_close), allow_syscall(libc::SYS_connect),