vmm: allow getdents64 in seccomp filter

This is used on older kernels where close_range() is not available.

Signed-off-by: Alyssa Ross <hi@alyssa.is>
Fixes: 505f4dfa ("vmm: close all unused fds in sigwinch listener")
This commit is contained in:
Alyssa Ross 2023-04-21 16:05:32 +00:00 committed by Rob Bradford
parent 9881c94f84
commit 3c0b389c82

View File

@ -523,6 +523,7 @@ fn vmm_thread_rules(
#[cfg(target_arch = "aarch64")]
(libc::SYS_newfstatat, vec![]),
(libc::SYS_futex, vec![]),
(libc::SYS_getdents64, vec![]),
(libc::SYS_getpgid, vec![]),
#[cfg(target_arch = "x86_64")]
(libc::SYS_getpgrp, vec![]),