From 14af74cb5b738d0c586285bc6ae4722b3e352580 Mon Sep 17 00:00:00 2001 From: Rob Bradford Date: Mon, 4 Jan 2021 13:04:32 +0000 Subject: [PATCH] vmm: seccomp: Allow clock_gettime() on the vCPU thread If the vCPU thread calls log!() the time difference between the call time and the boot up time is reported. On most environments and architectures this covered by a vDSO call rather than a syscall. However on some platforms this turns into a syscall. Fixes: #2080 Signed-off-by: Rob Bradford --- vmm/src/seccomp_filters.rs | 1 + 1 file changed, 1 insertion(+) diff --git a/vmm/src/seccomp_filters.rs b/vmm/src/seccomp_filters.rs index 3ee25fa25..3edb66fac 100644 --- a/vmm/src/seccomp_filters.rs +++ b/vmm/src/seccomp_filters.rs @@ -409,6 +409,7 @@ fn vcpu_thread_rules() -> Result, Error> { Ok(vec![ allow_syscall(libc::SYS_accept4), allow_syscall(libc::SYS_brk), + allow_syscall(libc::SYS_clock_gettime), allow_syscall(libc::SYS_clock_nanosleep), allow_syscall(libc::SYS_clone), allow_syscall(libc::SYS_close),