From 55c16fecbf7e4f2ca4775d9149613c69605367ea Mon Sep 17 00:00:00 2001 From: Rob Bradford Date: Wed, 5 Aug 2020 09:59:46 +0100 Subject: [PATCH] virtio-devices: seccomp: Add missing dup() syscalls The refactoring to use EpollHelper added a requirement on this system call. Signed-off-by: Rob Bradford --- virtio-devices/src/seccomp_filters.rs | 2 ++ 1 file changed, 2 insertions(+) diff --git a/virtio-devices/src/seccomp_filters.rs b/virtio-devices/src/seccomp_filters.rs index b07c4055e..e458c2a37 100644 --- a/virtio-devices/src/seccomp_filters.rs +++ b/virtio-devices/src/seccomp_filters.rs @@ -101,6 +101,7 @@ fn virtio_net_thread_rules() -> Result, Error> { fn virtio_pmem_thread_rules() -> Result, Error> { Ok(vec![ allow_syscall(libc::SYS_close), + allow_syscall(libc::SYS_dup), allow_syscall(libc::SYS_epoll_create1), allow_syscall(libc::SYS_epoll_ctl), allow_syscall(libc::SYS_epoll_pwait), @@ -121,6 +122,7 @@ fn virtio_pmem_thread_rules() -> Result, Error> { fn virtio_rng_thread_rules() -> Result, Error> { Ok(vec![ allow_syscall(libc::SYS_close), + allow_syscall(libc::SYS_dup), allow_syscall(libc::SYS_epoll_create1), allow_syscall(libc::SYS_epoll_ctl), allow_syscall(libc::SYS_epoll_pwait),