From cd0b8ed8f834985b4791bf194fdfe32e6d25210c Mon Sep 17 00:00:00 2001 From: Michael Zhao Date: Wed, 19 Aug 2020 17:23:41 +0800 Subject: [PATCH] virtio-devices: Allowing SYS_write syscall for virtio-net-ctl thread "debug!" marco is used in virtio-devices/src/epoll_helper.rs. When"-vvv" and "--log-file" option was specified, the missing "SYS_write" rule caused a "bad system call" crash. Signed-off-by: Michael Zhao --- virtio-devices/src/seccomp_filters.rs | 1 + 1 file changed, 1 insertion(+) diff --git a/virtio-devices/src/seccomp_filters.rs b/virtio-devices/src/seccomp_filters.rs index af51048b3..c82fda5af 100644 --- a/virtio-devices/src/seccomp_filters.rs +++ b/virtio-devices/src/seccomp_filters.rs @@ -181,6 +181,7 @@ fn virtio_net_ctl_thread_rules() -> Result, Error> { allow_syscall(libc::SYS_read), allow_syscall(libc::SYS_rt_sigprocmask), allow_syscall(libc::SYS_sigaltstack), + allow_syscall(libc::SYS_write), ]) }