Ruben Hakobyan ec157d7eb9 seccomp: allow openat + read on the HTTP API thread under KVM SEV-SNP ...

The KVM SEV-SNP net-hotplug integration tests (supported added in
later commits) intermittently kill the VMM with SIGSYS on the
http-server thread. The thread is seen reading
/proc/sys/vm/overcommit_memory (openat + read).

Allow the syscalls there, gated on sev_snp+kvm. seccomp can't match
a path, so the open is restricted to O_RDONLY.

Assisted-by: Claude:Opus-4.8
Signed-off-by: Ruben Hakobyan <hruben@meta.com>

2026-06-09 15:49:42 +00:00

..

src

seccomp: allow openat + read on the HTTP API thread under KVM SEV-SNP

2026-06-09 15:49:42 +00:00

build.rs

build: Add "fuzzing" as a valid cfg(..) attribute

2024-05-08 08:10:28 +00:00

Cargo.toml

vmm: omit unset Option fields from API responses

2026-06-03 15:47:38 +01:00