From 9c368e3cf9fb32682849494c7e91daa59333a799 Mon Sep 17 00:00:00 2001 From: Justin Cormack Date: Sun, 29 Jan 2017 14:53:15 +0000 Subject: [PATCH] Add two arm specific syscalls to seccomp profile These are arm variants with different argument ordering because of register alignment requirements. fix #30516 Signed-off-by: Justin Cormack Upstream-commit: d6adcd6a82ba0997fcc123090711b5502da5cbfd Component: engine --- components/engine/profiles/seccomp/default.json | 2 ++ components/engine/profiles/seccomp/seccomp_default.go | 2 ++ 2 files changed, 4 insertions(+) diff --git a/components/engine/profiles/seccomp/default.json b/components/engine/profiles/seccomp/default.json index 066dc9a7c5..d6e130c5c5 100755 --- a/components/engine/profiles/seccomp/default.json +++ b/components/engine/profiles/seccomp/default.json @@ -632,6 +632,8 @@ }, { "names": [ + "arm_fadvise64_64", + "arm_sync_file_range", "breakpoint", "cacheflush", "set_tls" diff --git a/components/engine/profiles/seccomp/seccomp_default.go b/components/engine/profiles/seccomp/seccomp_default.go index 9527793a45..e831da6d18 100644 --- a/components/engine/profiles/seccomp/seccomp_default.go +++ b/components/engine/profiles/seccomp/seccomp_default.go @@ -535,6 +535,8 @@ func DefaultProfile() *types.Seccomp { }, { Names: []string{ + "arm_fadvise64_64", + "arm_sync_file_range", "breakpoint", "cacheflush", "set_tls",