summaryrefslogtreecommitdiffhomepage
path: root/runsc/fsgofer
diff options
context:
space:
mode:
authorFabricio Voznika <fvoznika@google.com>2018-09-05 13:16:49 -0700
committerShentubot <shentubot@google.com>2018-09-05 13:18:06 -0700
commit4b57fd920d2d9fe3c8351d5b73b496902c928d95 (patch)
tree3d75f35cfcaf5009de1b504a7811575a1e0d3721 /runsc/fsgofer
parent1d22d87fdc464b0641eca69f730777c27984c2ff (diff)
Add MADVISE to fsgofer seccomp profile
PiperOrigin-RevId: 211686037 Change-Id: I0e776ca760b65ba100e495f471b6e811dbd6590a
Diffstat (limited to 'runsc/fsgofer')
-rw-r--r--runsc/fsgofer/filter/config.go1
1 files changed, 1 insertions, 0 deletions
diff --git a/runsc/fsgofer/filter/config.go b/runsc/fsgofer/filter/config.go
index 97e556ceb..0a1c63753 100644
--- a/runsc/fsgofer/filter/config.go
+++ b/runsc/fsgofer/filter/config.go
@@ -105,6 +105,7 @@ var allowedSyscalls = seccomp.SyscallRules{
syscall.SYS_GETTIMEOFDAY: {},
syscall.SYS_LINKAT: {},
syscall.SYS_LSEEK: {},
+ syscall.SYS_MADVISE: {},
syscall.SYS_MKDIRAT: {},
syscall.SYS_MMAP: []seccomp.Rule{
{