From e8f0bdb6f27ea55a27bcba248d68b7c876d24dd1 Mon Sep 17 00:00:00 2001 From: Sebastien Boeuf Date: Tue, 11 Aug 2020 18:42:55 +0200 Subject: [PATCH] virtio-devices: console: Add dup syscall to seccomp filters The seccomp filters specific to the virtio-console thread must contain dup syscall now that we ported the epoll code to the EpollHelper. Signed-off-by: Sebastien Boeuf --- virtio-devices/src/seccomp_filters.rs | 1 + 1 file changed, 1 insertion(+) diff --git a/virtio-devices/src/seccomp_filters.rs b/virtio-devices/src/seccomp_filters.rs index e458c2a37..79c5c9fcf 100644 --- a/virtio-devices/src/seccomp_filters.rs +++ b/virtio-devices/src/seccomp_filters.rs @@ -59,6 +59,7 @@ fn virtio_blk_thread_rules() -> Result, Error> { fn virtio_console_thread_rules() -> Result, Error> { Ok(vec![ allow_syscall(libc::SYS_close), + allow_syscall(libc::SYS_dup), allow_syscall(libc::SYS_epoll_create1), allow_syscall(libc::SYS_epoll_ctl), allow_syscall(libc::SYS_epoll_pwait),