Commit 4b45b055 authored by Paolo Bonzini's avatar Paolo Bonzini Committed by Eduardo Otubo
Browse files

seccomp: add mlockall to whitelist 



This is used by "-realtime mlock=on".

Signed-off-by: default avatarEduardo Otubo <eduardo.otubo@profitbricks.com>
Signed-off-by: default avatarPaolo Bonzini <pbonzini@redhat.com>
Reviewed-by: default avatarAmit Shah <amit.shah@redhat.com>
Reviewed-by: default avatarEduardo Habkost <ehabkost@redhat.com>
Tested-by: default avatarEduardo Habkost <ehabkost@redhat.com>
Acked-by: default avatarEduardo Otubo <eduardo.otubo@profitbricks.com>
parent 8f970eff

qemu-seccomp.c

+1 −0
Original line number Diff line number Diff line
@@ -229,6 +229,7 @@ static const struct QemuSeccompSyscall seccomp_whitelist[] = { 
    { SCMP_SYS(shmdt), 240 },

    { SCMP_SYS(timerfd_create), 240 },

    { SCMP_SYS(shmctl), 240 },

    { SCMP_SYS(mlockall), 240 },

    { SCMP_SYS(mlock), 240 },

    { SCMP_SYS(munlock), 240 },

    { SCMP_SYS(semctl), 240 },