From a95b6bbd8b403505dc77713ccedc58996b90658e Mon Sep 17 00:00:00 2001 From: Michael Zhao Date: Wed, 26 Aug 2020 12:56:51 +0800 Subject: [PATCH] vmm: Add seccomp rules for starting vhost-user-net backend on AArch64 Signed-off-by: Michael Zhao --- vmm/src/seccomp_filters.rs | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/vmm/src/seccomp_filters.rs b/vmm/src/seccomp_filters.rs index 558f43c75..c71a7b679 100644 --- a/vmm/src/seccomp_filters.rs +++ b/vmm/src/seccomp_filters.rs @@ -276,6 +276,10 @@ fn vmm_thread_rules() -> Result, Error> { // The definition of libc::SYS_ftruncate is missing on AArch64. // Use a hard-code number instead. allow_syscall(46), + #[cfg(target_arch = "aarch64")] + allow_syscall(libc::SYS_faccessat), + #[cfg(target_arch = "aarch64")] + allow_syscall(libc::SYS_newfstatat), allow_syscall(libc::SYS_futex), allow_syscall(libc::SYS_getpid), allow_syscall(libc::SYS_getrandom),