kata-containers/cloud-hypervisor
1
0
Fork 0
mirror of https://github.com/cloud-hypervisor/cloud-hypervisor.git synced 2026-08-05 02:19:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

vmm: seccomp: Allow BLKGETSIZE64 ioctl

Browse Source 
Add BLKGETSIZE64 0x80081272 to the VMM seccomp ioctl allow list
alongside the existing BLK* ioctls. This is needed for querying
block device size without seeking.

Signed-off-by: Anatol Belski <anbelski@linux.microsoft.com>
This commit is contained in:
Anatol Belski
2026-03-25 22:44:43 +01:00
committed by Rob Bradford
parent 9156758828
commit c5dba9ea3b
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
vmm/src/seccomp_filters.rs
View File

@@ -110,9 +110,10 @@ mod kvm {
pub const KVM_SET_NESTED_STATE: u64 = 1082175167;
}
// Block device ioctls for sparse support probing (not exported by libc)
// Block device ioctls (not exported by libc)
const BLKDISCARD: u64 = 0x1277; // _IO(0x12, 119)
const BLKZEROOUT: u64 = 0x127f; // _IO(0x12, 127)
const BLKGETSIZE64: u64 = 0x80081272; // _IOR(0x12, 114, size_t)
// MSHV IOCTL code. This is unstable until the kernel code has been declared stable.
#[cfg(feature = "mshv")]
@@ -265,6 +266,7 @@ fn create_vmm_ioctl_seccomp_rule_common(
and![Cond::new(1, ArgLen::Dword, Eq, BLKPBSZGET as _)?],
and![Cond::new(1, ArgLen::Dword, Eq, BLKIOMIN as _)?],
and![Cond::new(1, ArgLen::Dword, Eq, BLKIOOPT as _)?],
and![Cond::new(1, ArgLen::Dword, Eq, BLKGETSIZE64 as _)?],
and![Cond::new(1, ArgLen::Dword, Eq, BLKDISCARD as _)?],
and![Cond::new(1, ArgLen::Dword, Eq, BLKZEROOUT as _)?],
and![Cond::new(1, ArgLen::Dword, Eq, FIOCLEX as _)?],