cloud-hypervisor/virtio-devices
Rob Bradford 53caa565bb virtio-devices: Add openat() syscall to seccomp filter
When freeing memory sometimes glibc will attempt to read
"/proc/sys/vm/overcommit_memory" to find out how it should release the
blocks. This happens sporadically with Cloud Hypervisor but has been
seen in use. It is not necessary to add the read() syscall to the list
as it is already included in the virtio devices common set. Similarly
the vCPU and vmm threads already have both these in the allowed list.

Fixes: #3609

Signed-off-by: Rob Bradford <robert.bradford@intel.com>
2022-01-21 17:58:15 +00:00
..
src virtio-devices: Add openat() syscall to seccomp filter 2022-01-21 17:58:15 +00:00
Cargo.toml build: bump libc from 0.2.112 to 0.2.113 2022-01-21 00:44:12 +00:00