From e8a3e4f0467ddf7d96be2707a8f75bc07a8e3e5b Mon Sep 17 00:00:00 2001 From: Alyssa Ross Date: Tue, 4 Aug 2026 01:45:12 +0200 Subject: [PATCH] seccomp: allow pwritev2 Since the latest release, musl preferentially uses this syscall in its pwrite and pwritev implementations. Signed-off-by: Alyssa Ross --- virtio-devices/src/seccomp_filters.rs | 1 + vmm/src/seccomp_filters.rs | 2 ++ 2 files changed, 3 insertions(+) diff --git a/virtio-devices/src/seccomp_filters.rs b/virtio-devices/src/seccomp_filters.rs index 7ed256a4d..0db2222e8 100644 --- a/virtio-devices/src/seccomp_filters.rs +++ b/virtio-devices/src/seccomp_filters.rs @@ -128,6 +128,7 @@ fn virtio_block_thread_rules() -> Vec<(i64, Vec)> { (libc::SYS_pread64, vec![]), (libc::SYS_preadv, vec![]), (libc::SYS_pwritev, vec![]), + (libc::SYS_pwritev2, vec![]), (libc::SYS_pwrite64, vec![]), (libc::SYS_sched_getaffinity, vec![]), (libc::SYS_sched_setaffinity, vec![]), diff --git a/vmm/src/seccomp_filters.rs b/vmm/src/seccomp_filters.rs index fcbcebffe..fc6014b94 100644 --- a/vmm/src/seccomp_filters.rs +++ b/vmm/src/seccomp_filters.rs @@ -734,6 +734,7 @@ fn vmm_thread_rules( (libc::SYS_prlimit64, vec![]), (libc::SYS_pwrite64, vec![]), (libc::SYS_pwritev, vec![]), + (libc::SYS_pwritev2, vec![]), (libc::SYS_readv, vec![]), #[cfg(target_arch = "x86_64")] (libc::SYS_readlink, vec![]), @@ -941,6 +942,7 @@ fn vcpu_thread_rules( (libc::SYS_open, vec![]), (libc::SYS_pread64, vec![]), (libc::SYS_pwrite64, vec![]), + (libc::SYS_pwritev2, vec![]), #[cfg(target_arch = "x86_64")] (libc::SYS_readlink, vec![]), #[cfg(any(target_arch = "aarch64", target_arch = "riscv64"))]