vmm: Add seccomp rules for starting vhost-user-net backend on AArch64

Signed-off-by: Michael Zhao <michael.zhao@arm.com>
This commit is contained in:
Michael Zhao 2020-08-26 12:56:51 +08:00 committed by Sebastien Boeuf
parent f7b3581645
commit a95b6bbd8b

View File

@ -276,6 +276,10 @@ fn vmm_thread_rules() -> Result<Vec<SyscallRuleSet>, Error> {
// The definition of libc::SYS_ftruncate is missing on AArch64.
// Use a hard-code number instead.
allow_syscall(46),
#[cfg(target_arch = "aarch64")]
allow_syscall(libc::SYS_faccessat),
#[cfg(target_arch = "aarch64")]
allow_syscall(libc::SYS_newfstatat),
allow_syscall(libc::SYS_futex),
allow_syscall(libc::SYS_getpid),
allow_syscall(libc::SYS_getrandom),