diff options
| author | Dean Deng <deandeng@google.com> | 2020-03-14 07:13:15 -0700 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2020-03-14 07:14:33 -0700 |
| commit | 5e413cad10d2358a21dd08216953faee70e62a0b (patch) | |
| tree | 672fc1c7a2ca334ea24a16f54caa83283da64f4b /runsc | |
| parent | 45a8ae240dd180f1b8b4c56e77ac67e4cd3af96f (diff) | |
Plumb VFS2 imported fds into virtual filesystem.
- When setting up the virtual filesystem, mount a host.filesystem to contain
all files that need to be imported.
- Make read/preadv syscalls to the host in cases where preadv2 may not be
supported yet (likewise for writing).
- Make save/restore functions in kernel/kernel.go return early if vfs2 is
enabled.
PiperOrigin-RevId: 300922353
Diffstat (limited to 'runsc')
| -rw-r--r-- | runsc/boot/filter/config.go | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/runsc/boot/filter/config.go b/runsc/boot/filter/config.go index a4627905e..f459d1973 100644 --- a/runsc/boot/filter/config.go +++ b/runsc/boot/filter/config.go @@ -284,6 +284,7 @@ var allowedSyscalls = seccomp.SyscallRules{ {seccomp.AllowAny{}, seccomp.AllowValue(syscall.SHUT_RDWR)}, }, syscall.SYS_SIGALTSTACK: {}, + unix.SYS_STATX: {}, syscall.SYS_SYNC_FILE_RANGE: {}, syscall.SYS_TGKILL: []seccomp.Rule{ { |