Skip to content

Commit 8bf58cd

Browse files
mgornybluca
authored andcommitted
nspawn: Include arm_fadvise64_64 in syscall allow_list
Add the `arm_fadvise64_64` syscall to the allow_list, in addition to the existing `fadvise64` and `fadvise64_64` syscalls, as this is the syscall actually defined for `arm` architecture. Adding it fixes the syscall being rejected in arm32 containers. Fixes #35194 (cherry picked from commit 7fd70a5) (cherry picked from commit 964ced4)
1 parent 3b37660 commit 8bf58cd

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

src/nspawn/nspawn-seccomp.c

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -50,6 +50,7 @@ static int add_syscall_filters(
5050
{ CAP_IPC_LOCK, "@memlock" },
5151

5252
/* Plus a good set of additional syscalls which are not part of any of the groups above */
53+
{ 0, "arm_fadvise64_64" },
5354
{ 0, "brk" },
5455
{ 0, "capget" },
5556
{ 0, "capset" },

0 commit comments

Comments
 (0)