From dd09a0a89093badc3538476220dd9d17de11edbf Mon Sep 17 00:00:00 2001 From: Praveen K Paladugu Date: Wed, 26 Jul 2023 16:22:04 +0000 Subject: [PATCH] vmm: Extend mshv ioctls in seccomp filters Add MSHV_CREATE_DEVICE, MSHV_SET_DEVICE_ATTR ioctls to filters. These ioctls are required to passthrough PCI devices on mshv. Signed-off-by: Praveen K Paladugu --- vmm/src/seccomp_filters.rs | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/vmm/src/seccomp_filters.rs b/vmm/src/seccomp_filters.rs index db0d1d771..7949ea04b 100644 --- a/vmm/src/seccomp_filters.rs +++ b/vmm/src/seccomp_filters.rs @@ -170,6 +170,8 @@ mod mshv { pub const MSHV_GET_GPA_ACCESS_STATES: u64 = 0xc01c_b812; pub const MSHV_VP_TRANSLATE_GVA: u64 = 0xc020_b80e; pub const MSHV_CREATE_PARTITION: u64 = 0x4030_b801; + pub const MSHV_CREATE_DEVICE: u64 = 0xc00c_b813; + pub const MSHV_SET_DEVICE_ATTR: u64 = 0x4018_b814; pub const MSHV_VP_REGISTER_INTERCEPT_RESULT: u64 = 0x4030_b817; } #[cfg(feature = "mshv")] @@ -206,6 +208,8 @@ fn create_vmm_ioctl_seccomp_rule_common_mshv() -> Result, Backe Eq, MSHV_VP_REGISTER_INTERCEPT_RESULT )?], + and![Cond::new(1, ArgLen::Dword, Eq, MSHV_CREATE_DEVICE)?], + and![Cond::new(1, ArgLen::Dword, Eq, MSHV_SET_DEVICE_ATTR)?], ]) }