Merge pull request #43092 from nmeum/swapcontext-syscall

seccomp: add support for "swapcontext" syscall in default policy
moby · Jan 6, 2022 · b0806bd · b0806bd
2 parents 6faceab + 85eaf23
commit b0806bd
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/profiles/seccomp/default.json b/profiles/seccomp/default.json
@@ -474,7 +474,8 @@
 		},
 		{
 			"names": [
-				"sync_file_range2"
+				"sync_file_range2",
+				"swapcontext"
 			],
 			"action": "SCMP_ACT_ALLOW",
 			"includes": {

diff --git a/profiles/seccomp/default_linux.go b/profiles/seccomp/default_linux.go
@@ -474,6 +474,7 @@ func DefaultProfile() *Seccomp {
 			LinuxSyscall: specs.LinuxSyscall{
 				Names: []string{
 					"sync_file_range2",
+					"swapcontext",
 				},
 				Action: specs.ActAllow,
 			},