Explorar o código

Merge pull request #43092 from nmeum/swapcontext-syscall

seccomp: add support for "swapcontext" syscall in default policy
Sebastiaan van Stijn %!s(int64=3) %!d(string=hai) anos
pai
achega
b0806bdb03
Modificáronse 2 ficheiros con 3 adicións e 1 borrados
  1. 2 1
      profiles/seccomp/default.json
  2. 1 0
      profiles/seccomp/default_linux.go

+ 2 - 1
profiles/seccomp/default.json

@@ -474,7 +474,8 @@
 		},
 		{
 			"names": [
-				"sync_file_range2"
+				"sync_file_range2",
+				"swapcontext"
 			],
 			"action": "SCMP_ACT_ALLOW",
 			"includes": {

+ 1 - 0
profiles/seccomp/default_linux.go

@@ -474,6 +474,7 @@ func DefaultProfile() *Seccomp {
 			LinuxSyscall: specs.LinuxSyscall{
 				Names: []string{
 					"sync_file_range2",
+					"swapcontext",
 				},
 				Action: specs.ActAllow,
 			},