From 4b57fd920d2d9fe3c8351d5b73b496902c928d95 Mon Sep 17 00:00:00 2001 From: Fabricio Voznika Date: Wed, 5 Sep 2018 13:16:49 -0700 Subject: [PATCH] Add MADVISE to fsgofer seccomp profile PiperOrigin-RevId: 211686037 Change-Id: I0e776ca760b65ba100e495f471b6e811dbd6590a --- runsc/fsgofer/filter/config.go | 1 + 1 file changed, 1 insertion(+) diff --git a/runsc/fsgofer/filter/config.go b/runsc/fsgofer/filter/config.go index 97e556ceb..0a1c63753 100644 --- a/runsc/fsgofer/filter/config.go +++ b/runsc/fsgofer/filter/config.go @@ -105,6 +105,7 @@ var allowedSyscalls = seccomp.SyscallRules{ syscall.SYS_GETTIMEOFDAY: {}, syscall.SYS_LINKAT: {}, syscall.SYS_LSEEK: {}, + syscall.SYS_MADVISE: {}, syscall.SYS_MKDIRAT: {}, syscall.SYS_MMAP: []seccomp.Rule{ {