diff options
| author | gVisor bot <gvisor-bot@google.com> | 2020-06-05 21:36:29 +0000 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2020-06-05 21:36:29 +0000 |
| commit | 1826919dce0094b586ff3346ff2b66cddb1f1acf (patch) | |
| tree | f7dbc7b8d553bb3ef2721bb258327940d2bf49ae /runsc/boot | |
| parent | c9f102ea08e9d0b8e8aa7a9a93bff9bd2fdde80e (diff) | |
| parent | e4e11f2798db1c063e588383e237f1f5b06809db (diff) | |
Merge release-20200522.0-83-ge4e11f27 (automated)
Diffstat (limited to 'runsc/boot')
| -rw-r--r-- | runsc/boot/filter/extra_filters_msan.go | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/runsc/boot/filter/extra_filters_msan.go b/runsc/boot/filter/extra_filters_msan.go index 5e5a3c998..209e646a7 100644 --- a/runsc/boot/filter/extra_filters_msan.go +++ b/runsc/boot/filter/extra_filters_msan.go @@ -26,6 +26,8 @@ import ( func instrumentationFilters() seccomp.SyscallRules { Report("MSAN is enabled: syscall filters less restrictive!") return seccomp.SyscallRules{ + syscall.SYS_CLONE: {}, + syscall.SYS_MMAP: {}, syscall.SYS_SCHED_GETAFFINITY: {}, syscall.SYS_SET_ROBUST_LIST: {}, } |