summaryrefslogtreecommitdiffhomepage
path: root/runsc
diff options
context:
space:
mode:
authorgVisor bot <gvisor-bot@google.com>2021-09-30 15:50:32 +0000
committergVisor bot <gvisor-bot@google.com>2021-09-30 15:50:32 +0000
commit183feeba6f103aead3bd0ea51e64eccf8f24c54d (patch)
treea2f6267dfe2ba85a72caf81c736a607813566057 /runsc
parentdef97370162bea8895d521675e33fd573e688002 (diff)
parentb4d4f4bd861c98feb0e28d637ef701b9f7f1840e (diff)
Merge release-20210921.0-44-gb4d4f4bd8 (automated)
Diffstat (limited to 'runsc')
-rw-r--r--runsc/boot/filter/config.go16
1 files changed, 16 insertions, 0 deletions
diff --git a/runsc/boot/filter/config.go b/runsc/boot/filter/config.go
index 703f34827..d875aa334 100644
--- a/runsc/boot/filter/config.go
+++ b/runsc/boot/filter/config.go
@@ -304,6 +304,22 @@ var allowedSyscalls = seccomp.SyscallRules{
seccomp.EqualTo(unix.SPLICE_F_NONBLOCK), /* flags */
},
},
+ unix.SYS_TIMER_CREATE: []seccomp.Rule{
+ {
+ seccomp.EqualTo(unix.CLOCK_THREAD_CPUTIME_ID), /* which */
+ seccomp.MatchAny{}, /* sevp */
+ seccomp.MatchAny{}, /* timerid */
+ },
+ },
+ unix.SYS_TIMER_DELETE: []seccomp.Rule{},
+ unix.SYS_TIMER_SETTIME: []seccomp.Rule{
+ {
+ seccomp.MatchAny{}, /* timerid */
+ seccomp.EqualTo(0), /* flags */
+ seccomp.MatchAny{}, /* new_value */
+ seccomp.EqualTo(0), /* old_value */
+ },
+ },
unix.SYS_TGKILL: []seccomp.Rule{
{
seccomp.EqualTo(uint64(os.Getpid())),