Browse Source

Merge pull request #43092 from nmeum/swapcontext-syscall

seccomp: add support for "swapcontext" syscall in default policy
Sebastiaan van Stijn 3 years ago
parent
commit
b0806bdb03
2 changed files with 3 additions and 1 deletions
  1. 2 1
      profiles/seccomp/default.json
  2. 1 0
      profiles/seccomp/default_linux.go

+ 2 - 1
profiles/seccomp/default.json

@@ -474,7 +474,8 @@
 		},
 		{
 			"names": [
-				"sync_file_range2"
+				"sync_file_range2",
+				"swapcontext"
 			],
 			"action": "SCMP_ACT_ALLOW",
 			"includes": {

+ 1 - 0
profiles/seccomp/default_linux.go

@@ -474,6 +474,7 @@ func DefaultProfile() *Seccomp {
 			LinuxSyscall: specs.LinuxSyscall{
 				Names: []string{
 					"sync_file_range2",
+					"swapcontext",
 				},
 				Action: specs.ActAllow,
 			},