From b4f6db5f31b391e317740f69a963cdbf2f3d881c Mon Sep 17 00:00:00 2001 From: Bo Chen Date: Thu, 10 Sep 2020 16:59:25 -0700 Subject: [PATCH] virtio-devices: vsock: Add 'brk' to the seccomp list We observed CI instability for the past couple of days. This instability is confirmed to be a result of incomplete seccomp filters. Given the filter on 'virtio_vsock' is recently added and is missing 'brk', it is likely to be the root cause of the instability. Signed-off-by: Bo Chen --- virtio-devices/src/seccomp_filters.rs | 1 + 1 file changed, 1 insertion(+) diff --git a/virtio-devices/src/seccomp_filters.rs b/virtio-devices/src/seccomp_filters.rs index 7b4ee776e..c47c7aba1 100644 --- a/virtio-devices/src/seccomp_filters.rs +++ b/virtio-devices/src/seccomp_filters.rs @@ -382,6 +382,7 @@ fn create_vsock_ioctl_seccomp_rule() -> Result, Error> { fn virtio_vsock_thread_rules() -> Result, Error> { Ok(vec![ allow_syscall(libc::SYS_accept4), + allow_syscall(libc::SYS_brk), allow_syscall(libc::SYS_close), allow_syscall(libc::SYS_dup), allow_syscall(libc::SYS_epoll_create1),