From 9f5590fe6cc556b417243a40a378f21de3bbfc96 Mon Sep 17 00:00:00 2001 From: Oliver Anderson Date: Fri, 5 Jun 2026 18:38:15 +0200 Subject: [PATCH] vmm: Add KVM_GET_MSR_FEATURE_INDEX_LIST to seccomp rules We need to update the seccomp filter to permit KVM_GET_MSR_FEATURE_INDEX_LIST which we introduced in the previous commit. Signed-off-by: Oliver Anderson On-behalf-of: SAP oliver.anderson@sap.com --- vmm/src/seccomp_filters.rs | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/vmm/src/seccomp_filters.rs b/vmm/src/seccomp_filters.rs index 308cfa6bf..f5993758d 100644 --- a/vmm/src/seccomp_filters.rs +++ b/vmm/src/seccomp_filters.rs @@ -458,6 +458,7 @@ fn create_vmm_ioctl_seccomp_rule_kvm() -> Result, BackendError> const KVM_GET_FPU: u64 = 0x81a0_ae8c; const KVM_GET_LAPIC: u64 = 0x8400_ae8e; const KVM_GET_MSR_INDEX_LIST: u64 = 0xc004_ae02; + const KVM_GET_MSR_FEATURE_INDEX_LIST: u64 = 0xc004_ae0a; const KVM_GET_MSRS: u64 = 0xc008_ae88; const KVM_GET_SREGS: u64 = 0x8138_ae83; const KVM_GET_TSC_KHZ: u64 = 0xaea3; @@ -487,6 +488,12 @@ fn create_vmm_ioctl_seccomp_rule_kvm() -> Result, BackendError> and![Cond::new(1, ArgLen::Dword, Eq, KVM_GET_FPU)?], and![Cond::new(1, ArgLen::Dword, Eq, KVM_GET_LAPIC)?], and![Cond::new(1, ArgLen::Dword, Eq, KVM_GET_MSR_INDEX_LIST)?], + and![Cond::new( + 1, + ArgLen::Dword, + Eq, + KVM_GET_MSR_FEATURE_INDEX_LIST + )?], and![Cond::new(1, ArgLen::Dword, Eq, KVM_GET_MSRS)?], and![Cond::new(1, ArgLen::Dword, Eq, KVM_GET_SREGS)?], and![Cond::new(1, ArgLen::Dword, Eq, KVM_GET_TSC_KHZ)?],