seccomp: Allow syscalls needed for cloning EventFD

Signed-off-by: Adam Jensen <adam@acj.sh>
firecracker-microvm · Jan 30, 2024 · b7537ad · b7537ad
1 parent 79c5342
commit b7537ad
Show file tree

Hide file tree

Showing 2 changed files with 24 additions and 0 deletions.
diff --git a/resources/seccomp/aarch64-unknown-linux-musl.json b/resources/seccomp/aarch64-unknown-linux-musl.json
@@ -1041,6 +1041,18 @@
             {
                 "syscall": "sendmsg",
                 "comment": "Used by vhost-user frontend to communicate with the backend"
+            },
+            {
+                "syscall": "dup",
+                "comment": "Used when resetting VirtIO devices"
+            },
+            {
+                "syscall": "fcntl",
+                "comment": "Used when resetting VirtIO devices"
+            },
+            {
+                "syscall": "readlink",
+                "comment": "Used when resetting VirtIO devices"
             }
         ]
     }

diff --git a/resources/seccomp/x86_64-unknown-linux-musl.json b/resources/seccomp/x86_64-unknown-linux-musl.json
@@ -1245,6 +1245,18 @@
             {
                 "syscall": "sendmsg",
                 "comment": "Used by vhost-user frontend to communicate with the backend"
+            },
+            {
+                "syscall": "dup",
+                "comment": "Used when resetting VirtIO devices"
+            },
+            {
+                "syscall": "fcntl",
+                "comment": "Used when resetting VirtIO devices"
+            },
+            {
+                "syscall": "readlink",
+                "comment": "Used when resetting VirtIO devices"
             }
         ]
     }