Wei Liu 3837c87f1f vmm: add seccomp filter for serial-manager thread ...

The serial-manager thread was the only VMM-managed thread without a
seccomp filter. Add a Thread::SerialManager variant and whitelist the
31 syscalls needed for its epoll-based I/O loop (read, write, socket
ops, signal handling, memory allocation, glibc internals).

The filter is computed in start_thread() and applied before the epoll
loop, matching the pattern used by other VMM threads.

Signed-off-by: Wei Liu <liuwe@microsoft.com>
Assisted-by: Pi-agent:Claude-Opus-4.7

2026-05-19 16:57:53 +00:00

..

src

vmm: add seccomp filter for serial-manager thread

2026-05-19 16:57:53 +00:00

build.rs

build: Add "fuzzing" as a valid cfg(..) attribute

2024-05-08 08:10:28 +00:00

Cargo.toml

build(deps): bump the non-rust-vmm group across 2 directories with 11 updates

2026-05-08 00:48:40 +00:00