From 6326db6fc190a42728e4b0349245af96cf8d06e7 Mon Sep 17 00:00:00 2001 From: Michael Zhao Date: Thu, 18 Aug 2022 17:34:24 +0800 Subject: [PATCH] vmm: Extend seccomp rules for GDB Add 'KVM_SET_GUEST_DEBUG' ioctl to seccomp filter rules. Signed-off-by: Michael Zhao --- vmm/src/seccomp_filters.rs | 2 ++ 1 file changed, 2 insertions(+) diff --git a/vmm/src/seccomp_filters.rs b/vmm/src/seccomp_filters.rs index 2b94615a74..4fb46ed14d 100644 --- a/vmm/src/seccomp_filters.rs +++ b/vmm/src/seccomp_filters.rs @@ -382,11 +382,13 @@ fn create_vmm_ioctl_seccomp_rule_kvm() -> Result, BackendError> fn create_vmm_ioctl_seccomp_rule_kvm() -> Result, BackendError> { const KVM_ARM_PREFERRED_TARGET: u64 = 0x8020_aeaf; const KVM_ARM_VCPU_INIT: u64 = 0x4020_aeae; + const KVM_SET_GUEST_DEBUG: u64 = 0x4208_ae9b; let common_rules = create_vmm_ioctl_seccomp_rule_common(HypervisorType::Kvm)?; let mut arch_rules = or![ and![Cond::new(1, ArgLen::Dword, Eq, KVM_ARM_PREFERRED_TARGET,)?], and![Cond::new(1, ArgLen::Dword, Eq, KVM_ARM_VCPU_INIT,)?], + and![Cond::new(1, ArgLen::Dword, Eq, KVM_SET_GUEST_DEBUG,)?], ]; arch_rules.extend(common_rules);