Commit ea259aca authored by Paul Moore's avatar Paul Moore Committed by Eduardo Otubo
Browse files

seccomp: add mbind() to the syscall whitelist 



The "memory-backend-ram" QOM object utilizes the mbind(2) syscall to
set the policy for a memory range.  Add the syscall to the seccomp
sandbox whitelist.

Signed-off-by: default avatarPaul Moore <pmoore@redhat.com>
Signed-off-by: default avatarEduardo Otubo <eduardo.otubo@profitbricks.com>
Acked-by: default avatarEduardo Otubo <eduardo.otubo@profitbricks.com>
Tested-by: default avatarEduardo Habkost <ehabkost@redhat.com>
Reviewed-by: default avatarEduardo Habkost <ehabkost@redhat.com>
parent aa49668c

qemu-seccomp.c

+2 −1
Original line number Diff line number Diff line
@@ -235,7 +235,8 @@ static const struct QemuSeccompSyscall seccomp_whitelist[] = { 
    { SCMP_SYS(fallocate), 240 },

    { SCMP_SYS(fadvise64), 240 },

    { SCMP_SYS(inotify_init1), 240 },

    { SCMP_SYS(inotify_add_watch), 240 }

    { SCMP_SYS(inotify_add_watch), 240 },

    { SCMP_SYS(mbind), 240 }

};



int seccomp_start(void)