From 3c0b389c829e2067c35fc7d9d77c83c568eefb73 Mon Sep 17 00:00:00 2001 From: Alyssa Ross Date: Fri, 21 Apr 2023 16:05:32 +0000 Subject: [PATCH] vmm: allow getdents64 in seccomp filter This is used on older kernels where close_range() is not available. Signed-off-by: Alyssa Ross Fixes: 505f4dfa ("vmm: close all unused fds in sigwinch listener") --- vmm/src/seccomp_filters.rs | 1 + 1 file changed, 1 insertion(+) diff --git a/vmm/src/seccomp_filters.rs b/vmm/src/seccomp_filters.rs index c48a68fd4..295254f82 100644 --- a/vmm/src/seccomp_filters.rs +++ b/vmm/src/seccomp_filters.rs @@ -523,6 +523,7 @@ fn vmm_thread_rules( #[cfg(target_arch = "aarch64")] (libc::SYS_newfstatat, vec![]), (libc::SYS_futex, vec![]), + (libc::SYS_getdents64, vec![]), (libc::SYS_getpgid, vec![]), #[cfg(target_arch = "x86_64")] (libc::SYS_getpgrp, vec![]),