Merge pull request #43092 from nmeum/swapcontext-syscall

seccomp: add support for "swapcontext" syscall in default policy
2022-01-06 18:20:24 +01:00 · 2022-01-06 18:20:24 +01:00 · b0806bdb03
commit b0806bdb03
parent 6faceabbb3 85eaf23bf4
2 changed files with 3 additions and 1 deletions
--- a/profiles/seccomp/default.json
+++ b/profiles/seccomp/default.json
@ -474,7 +474,8 @@
 		},
 		{
 			"names": [
-				"sync_file_range2"
+				"sync_file_range2",
+				"swapcontext"
 			],
 			"action": "SCMP_ACT_ALLOW",
 			"includes": {
--- a/profiles/seccomp/default_linux.go
+++ b/profiles/seccomp/default_linux.go
@ -474,6 +474,7 @@ func DefaultProfile() *Seccomp {
 			LinuxSyscall: specs.LinuxSyscall{
 				Names: []string{
 					"sync_file_range2",
+					"swapcontext",
 				},
 				Action: specs.ActAllow,
 			},