seccomp: Allow syscalls needed for cloning EventFD

Signed-off-by: Adam Jensen <[email protected]>
firecracker-microvm · Jan 21, 2024 · 2a5c976 · 2a5c976
1 parent 1d1d916
commit 2a5c976
Show file tree

Hide file tree

Showing 2 changed files with 24 additions and 0 deletions.
diff --git a/resources/seccomp/aarch64-unknown-linux-musl.json b/resources/seccomp/aarch64-unknown-linux-musl.json
@@ -1041,6 +1041,18 @@
             {
                 "syscall": "sendmsg",
                 "comment": "Used by vhost-user frontend to communicate with the backend"
+            },
+            {
+                "syscall": "dup",
+                "comment": "Used when resetting VirtIO devices"
+            },
+            {
+                "syscall": "fcntl",
+                "comment": "Used when resetting VirtIO devices"
+            },
+            {
+                "syscall": "readlink",
+                "comment": "Used when resetting VirtIO devices"
             }
         ]
     }

diff --git a/resources/seccomp/x86_64-unknown-linux-musl.json b/resources/seccomp/x86_64-unknown-linux-musl.json
@@ -1245,6 +1245,18 @@
             {
                 "syscall": "sendmsg",
                 "comment": "Used by vhost-user frontend to communicate with the backend"
+            },
+            {
+                "syscall": "dup",
+                "comment": "Used when resetting VirtIO devices"
+            },
+            {
+                "syscall": "fcntl",
+                "comment": "Used when resetting VirtIO devices"
+            },
+            {
+                "syscall": "readlink",
+                "comment": "Used when resetting VirtIO devices"
             }
         ]
     }