seccomp: allow sendto for vfio_user devices

as of rust 1.90, writes to unix sockets use the sendto syscall. This
affects the vcpu threads when vfio_user devices are accessed.

Signed-off-by: Stefan Nürnberger <stefan.nuernberger@cyberus-technology.de>
This commit is contained in:
Stefan Nürnberger
2025-11-21 15:46:59 +01:00
committed by Bo Chen
parent f02745a7ed
commit 95b8c6afdd

View File

@@ -810,6 +810,7 @@ fn vcpu_thread_rules(
(libc::SYS_rt_sigreturn, vec![]),
(libc::SYS_sched_yield, vec![]),
(libc::SYS_sendmsg, vec![]),
(libc::SYS_sendto, vec![]),
(libc::SYS_shutdown, vec![]),
(libc::SYS_sigaltstack, vec![]),
(libc::SYS_tgkill, vec![]),