virtio-devices: seccomp: Add 'timerfd_settime' to block device

The `timerfd_settime` syscall is required when I/O throttling is
enabled.

Signed-off-by: Bo Chen <chen.bo@intel.com>
This commit is contained in:
Bo Chen 2021-03-15 11:58:26 -07:00 committed by Rob Bradford
parent 548426c128
commit 6307db5699

View File

@ -132,6 +132,7 @@ fn virtio_block_thread_rules() -> Vec<SyscallRuleSet> {
allow_syscall(libc::SYS_sched_getaffinity),
allow_syscall(libc::SYS_set_robust_list),
allow_syscall(libc::SYS_sigaltstack),
allow_syscall(libc::SYS_timerfd_settime),
allow_syscall(libc::SYS_write),
]
}