diff options
| author | gVisor bot <gvisor-bot@google.com> | 2021-10-05 19:52:40 +0000 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2021-10-05 19:52:40 +0000 |
| commit | 02f7b480cbde8bbdfdf8f2a753d510496b25c156 (patch) | |
| tree | 5e636033928dcc77c2bc1c2c036aa7863aaf4ddd /runsc/boot | |
| parent | 73ad66a5af2e9ccb1d3d6d4019da7b1bc6dc232d (diff) | |
| parent | 6f6cf522ec32e7988434586ce1fcbd7f2133dbaa (diff) | |
Merge release-20210927.0-31-g6f6cf522e (automated)
Diffstat (limited to 'runsc/boot')
| -rw-r--r-- | runsc/boot/filter/config.go | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/runsc/boot/filter/config.go b/runsc/boot/filter/config.go index d875aa334..db363435b 100644 --- a/runsc/boot/filter/config.go +++ b/runsc/boot/filter/config.go @@ -646,6 +646,11 @@ func hostInetFilters() seccomp.SyscallRules { func controlServerFilters(fd int) seccomp.SyscallRules { return seccomp.SyscallRules{ + unix.SYS_ACCEPT4: []seccomp.Rule{ + { + seccomp.EqualTo(fd), + }, + }, unix.SYS_ACCEPT: []seccomp.Rule{ { seccomp.EqualTo(fd), |