vmm: Add seccomp filter to the VMM thread

This commit introduces the application of the seccomp filter to the VMM
thread. The filter is empty for now (SeccompLevel::None).

Signed-off-by: Sebastien Boeuf <sebastien.boeuf@intel.com>
This commit is contained in:
Sebastien Boeuf
2020-03-20 15:57:17 +01:00
parent cb98d90097
commit db62cb3f4d
4 changed files with 21 additions and 0 deletions

View File

@@ -12,6 +12,7 @@ extern crate clap;
use clap::{App, Arg, ArgGroup, ArgMatches};
use libc::EFD_NONBLOCK;
use log::LevelFilter;
use seccomp::SeccompLevel;
use std::sync::mpsc::channel;
use std::sync::{Arc, Mutex};
use std::{env, process};
@@ -298,6 +299,7 @@ fn start_vmm(cmd_arguments: ArgMatches) {
api_evt.try_clone().unwrap(),
http_sender,
api_request_receiver,
&SeccompLevel::None,
) {
Ok(t) => t,
Err(e) => {