浏览代码

Add two arm specific syscalls to seccomp profile

These are arm variants with different argument ordering because of
register alignment requirements.

fix #30516

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
Justin Cormack 8 年之前
父节点
当前提交
d6adcd6a82
共有 2 个文件被更改,包括 4 次插入0 次删除
  1. 2 0
      profiles/seccomp/default.json
  2. 2 0
      profiles/seccomp/seccomp_default.go

+ 2 - 0
profiles/seccomp/default.json

@@ -632,6 +632,8 @@
 		},
 		},
 		{
 		{
 			"names": [
 			"names": [
+				"arm_fadvise64_64",
+				"arm_sync_file_range",
 				"breakpoint",
 				"breakpoint",
 				"cacheflush",
 				"cacheflush",
 				"set_tls"
 				"set_tls"

+ 2 - 0
profiles/seccomp/seccomp_default.go

@@ -535,6 +535,8 @@ func DefaultProfile() *types.Seccomp {
 		},
 		},
 		{
 		{
 			Names: []string{
 			Names: []string{
+				"arm_fadvise64_64",
+				"arm_sync_file_range",
 				"breakpoint",
 				"breakpoint",
 				"cacheflush",
 				"cacheflush",
 				"set_tls",
 				"set_tls",