Преглед изворни кода

Add two arm specific syscalls to seccomp profile

These are arm variants with different argument ordering because of
register alignment requirements.

fix #30516

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
Justin Cormack пре 8 година
родитељ
комит
d6adcd6a82
2 измењених фајлова са 4 додато и 0 уклоњено
  1. 2 0
      profiles/seccomp/default.json
  2. 2 0
      profiles/seccomp/seccomp_default.go

+ 2 - 0
profiles/seccomp/default.json

@@ -632,6 +632,8 @@
 		},
 		},
 		{
 		{
 			"names": [
 			"names": [
+				"arm_fadvise64_64",
+				"arm_sync_file_range",
 				"breakpoint",
 				"breakpoint",
 				"cacheflush",
 				"cacheflush",
 				"set_tls"
 				"set_tls"

+ 2 - 0
profiles/seccomp/seccomp_default.go

@@ -535,6 +535,8 @@ func DefaultProfile() *types.Seccomp {
 		},
 		},
 		{
 		{
 			Names: []string{
 			Names: []string{
+				"arm_fadvise64_64",
+				"arm_sync_file_range",
 				"breakpoint",
 				"breakpoint",
 				"cacheflush",
 				"cacheflush",
 				"set_tls",
 				"set_tls",