Expand syscall filters to support MSAN.

PiperOrigin-RevId: 314997564
2020-06-05 14:32:17 -07:00 · 2020-06-05 14:32:17 -07:00 · e4e11f2798
parent 6d9a68ca41
commit e4e11f2798
1 changed files with 2 additions and 0 deletions
--- a/runsc/boot/filter/extra_filters_msan.go
+++ b/runsc/boot/filter/extra_filters_msan.go
@ -26,6 +26,8 @@ import (
 func instrumentationFilters() seccomp.SyscallRules {
 	Report("MSAN is enabled: syscall filters less restrictive!")
 	return seccomp.SyscallRules{
+		syscall.SYS_CLONE:             {},
+		syscall.SYS_MMAP:              {},
 		syscall.SYS_SCHED_GETAFFINITY: {},
 		syscall.SYS_SET_ROBUST_LIST:   {},
 	}