kata-containers/cloud-hypervisor
1
0
Fork 0
mirror of https://github.com/cloud-hypervisor/cloud-hypervisor.git synced 2026-08-05 02:19:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

virtio-devices: Fix seccomp rules for SevSnp guest

Browse Source 
With commit 1e967697c ("vmm: pass AccessPlatform implementation for
SEV-SNP guest"), we started performing one additional ioctl to gain
access to the guest memory before accessing those regions inside
virtio-device emulation code path. This additional ioctl is not part of
the current seccomp filter, which is causing the SevSnp guest to crash
in this scenario with seccomp violation.

Fixes: 1e967697c ("vmm: pass AccessPlatform implementation for SEV-SNP
guest")
Signed-off-by: Jinank Jain <jinankjain@microsoft.com>
This commit is contained in:
Jinank Jain
2024-08-28 14:04:50 +05:30
committed by Bo Chen
parent a4cf175b8e
commit cd0cdac0ed
3 changed files with 16 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
virtio-devices/Cargo.toml
View File

@@ -6,7 +6,7 @@ version = "0.1.0"
[features]
default = []
sev_snp = []
sev_snp = ["mshv-ioctls"]
[dependencies]
anyhow = "1.0.86"
@@ -17,6 +17,7 @@ epoll = "4.3.3"
event_monitor = { path = "../event_monitor" }
libc = "0.2.155"
log = "0.4.22"
mshv-ioctls = { git = "https://github.com/rust-vmm/mshv", tag = "v0.2.0", optional = true }
net_gen = { path = "../net_gen" }
net_util = { path = "../net_util" }
pci = { path = "../pci" }