Browse Source

Add i386 specific modify_ldt syscall to default seccomp filter

This syscall is used by Go on i386 binaries, although not by libc.

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
Justin Cormack 9 years ago
parent
commit
13a9d4e899
1 changed files with 6 additions and 0 deletions
  1. 6 0
      daemon/execdriver/native/seccomp_default.go

+ 6 - 0
daemon/execdriver/native/seccomp_default.go

@@ -1564,5 +1564,11 @@ var defaultSeccompProfile = &configs.Seccomp{
 			Action: configs.Allow,
 			Args:   []*configs.Arg{},
 		},
+		// i386 specific syscalls
+		{
+			Name:   "modify_ldt",
+			Action: configs.Allow,
+			Args:   []*configs.Arg{},
+		},
 	},
 }