From bdef54ead6ca33052b05b3d608569aae43980ff3 Mon Sep 17 00:00:00 2001 From: Sebastien Boeuf Date: Tue, 11 Aug 2020 15:24:07 +0200 Subject: [PATCH] vmm: Add brk syscall to the API thread The brk syscall is not always called as the system might not need it. But when it's needed from the API thread, this causes the thread to terminate as it is not part of the authorized list of syscalls. This should fix some sporadic failures on the CI with the musl build. Signed-off-by: Sebastien Boeuf --- vmm/src/seccomp_filters.rs | 1 + 1 file changed, 1 insertion(+) diff --git a/vmm/src/seccomp_filters.rs b/vmm/src/seccomp_filters.rs index ad595a3df..670f333c7 100644 --- a/vmm/src/seccomp_filters.rs +++ b/vmm/src/seccomp_filters.rs @@ -350,6 +350,7 @@ fn api_thread_rules() -> Result, Error> { Ok(vec![ allow_syscall(libc::SYS_accept4), allow_syscall(libc::SYS_bind), + allow_syscall(libc::SYS_brk), allow_syscall(libc::SYS_close), allow_syscall(libc::SYS_dup), allow_syscall(libc::SYS_epoll_create1),