diff options
| author | gVisor bot <gvisor-bot@google.com> | 2020-10-29 19:34:29 +0000 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2020-10-29 19:34:29 +0000 |
| commit | 322b3f8d1e275eae3154d28f56b1c0644d9fcabc (patch) | |
| tree | f8d2a3d7bb7ebf7116e65f54a93c26919f212cd8 /runsc/boot | |
| parent | 966abed75cd61507d6e739f8ef6787e94c30f96a (diff) | |
| parent | 02fe467b476474477d226b949307ec8bf1253108 (diff) | |
Merge release-20201019.0-101-g02fe467b4 (automated)
Diffstat (limited to 'runsc/boot')
| -rw-r--r-- | runsc/boot/loader.go | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/runsc/boot/loader.go b/runsc/boot/loader.go index 10f0f452b..db2b0cea7 100644 --- a/runsc/boot/loader.go +++ b/runsc/boot/loader.go @@ -50,6 +50,7 @@ import ( "gvisor.dev/gvisor/pkg/sentry/pgalloc" "gvisor.dev/gvisor/pkg/sentry/platform" "gvisor.dev/gvisor/pkg/sentry/sighandling" + "gvisor.dev/gvisor/pkg/sentry/socket/netfilter" "gvisor.dev/gvisor/pkg/sentry/syscalls/linux/vfs2" "gvisor.dev/gvisor/pkg/sentry/time" "gvisor.dev/gvisor/pkg/sentry/usage" @@ -1084,6 +1085,7 @@ func newEmptySandboxNetworkStack(clock tcpip.Clock, uniqueID stack.UniqueID) (in // privileges. RawFactory: raw.EndpointFactory{}, UniqueID: uniqueID, + IPTables: netfilter.DefaultLinuxTables(), })} // Enable SACK Recovery. |