virtio-devices: seccomp: Add seccomp filters for rng thread

This patch enables the seccomp filters for the rng worker thread.

Partially fixes: #925

Signed-off-by: Bo Chen <chen.bo@intel.com>
This commit is contained in:
Bo Chen
2020-08-04 10:46:49 -07:00
committed by Rob Bradford
parent 6a26789222
commit a426221167
4 changed files with 55 additions and 4 deletions

View File

@@ -1960,8 +1960,13 @@ impl DeviceManager {
let id = String::from(RNG_DEVICE_NAME);
let virtio_rng_device = Arc::new(Mutex::new(
virtio_devices::Rng::new(id.clone(), rng_path, rng_config.iommu)
.map_err(DeviceManagerError::CreateVirtioRng)?,
virtio_devices::Rng::new(
id.clone(),
rng_path,
rng_config.iommu,
self.seccomp_action.clone(),
)
.map_err(DeviceManagerError::CreateVirtioRng)?,
));
devices.push((
Arc::clone(&virtio_rng_device) as VirtioDeviceArc,