External/cloud-hypervisor
1
0
Fork 0
mirror of https://github.com/cloud-hypervisor/cloud-hypervisor.git synced 2025-01-03 11:25:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

vmm: Fix seccomp violation while injecting NMI

Browse Source 
... in case of guest running on Microsoft Hypervisor.

Signed-off-by: Jinank Jain <jinankjain@microsoft.com>
This commit is contained in:
Jinank Jain 2024-09-06 21:24:25 +05:30 committed by Rob Bradford
parent 68468b8519
commit 60aed1bd81
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
vmm/src/seccomp_filters.rs
View File

@ -226,6 +226,7 @@ fn create_vmm_ioctl_seccomp_rule_common_mshv() -> Result<Vec<SeccompRule>, Backe
MSHV_ISSUE_PSP_GUEST_REQUEST() MSHV_ISSUE_PSP_GUEST_REQUEST()
)?], )?],
and![Cond::new(1, ArgLen::Dword, Eq, MSHV_ROOT_HVCALL())?], and![Cond::new(1, ArgLen::Dword, Eq, MSHV_ROOT_HVCALL())?],
and![Cond::new(1, ArgLen::Dword, Eq, MSHV_ASSERT_INTERRUPT())?],
]) ])
} }
@ -719,6 +720,7 @@ fn create_vcpu_ioctl_seccomp_rule_mshv() -> Result<Vec<SeccompRule>, BackendErro
MSHV_ISSUE_PSP_GUEST_REQUEST() MSHV_ISSUE_PSP_GUEST_REQUEST()
)?], )?],
and![Cond::new(1, ArgLen::Dword, Eq, MSHV_ROOT_HVCALL())?], and![Cond::new(1, ArgLen::Dword, Eq, MSHV_ROOT_HVCALL())?],
and![Cond::new(1, ArgLen::Dword, Eq, MSHV_ASSERT_INTERRUPT())?],
]) ])
} }