seccomp: whitelist io-uring related system calls

Signed-off-by: youcai <omegacoleman@gmail.com>
moby · Sep 7, 2019 · f4d41f1 · f4d41f1
1 parent 4ce0402
commit f4d41f1
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/profiles/seccomp/default.json b/profiles/seccomp/default.json
@@ -167,6 +167,9 @@
 				"ioprio_set",
 				"io_setup",
 				"io_submit",
+				"io_uring_enter",
+				"io_uring_register",
+				"io_uring_setup",
 				"ipc",
 				"kill",
 				"lchown",

diff --git a/profiles/seccomp/seccomp_default.go b/profiles/seccomp/seccomp_default.go
@@ -160,6 +160,9 @@ func DefaultProfile() *types.Seccomp {
 				"ioprio_set",
 				"io_setup",
 				"io_submit",
+				"io_uring_enter",
+				"io_uring_register",
+				"io_uring_setup",
 				"ipc",
 				"kill",
 				"lchown",