netbird/gvisor
0
0
Fork 0
mirror of https://github.com/netbirdio/gvisor.git synced 2026-05-22 17:12:49 -07:00
Code Issues Packages Projects Releases Wiki Activity

runsc/filters: permit clock_nanosleep for race

Browse Source 
Syzkaller hosts contains many audit messages that runsc tries
to call the clock_nanosleep syscall.

PiperOrigin-RevId: 359331413
This commit is contained in:
Andrei Vagin
2021-02-24 11:36:59 -08:00
committed by gVisor bot
parent acd516cfe2
commit 055073f118
2 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
runsc/boot/filter/extra_filters_race.go
+1
View File
@@ -27,6 +27,7 @@ func instrumentationFilters() seccomp.SyscallRules {
Report("TSAN is enabled: syscall filters less restrictive!")
return seccomp.SyscallRules{
syscall.SYS_BRK: {},
syscall.SYS_CLOCK_NANOSLEEP: {},
syscall.SYS_CLONE: {},
syscall.SYS_FUTEX: {},
syscall.SYS_MMAP: {},
runsc/fsgofer/filter/extra_filters_race.go
+1
View File
@@ -28,6 +28,7 @@ func instrumentationFilters() seccomp.SyscallRules {
log.Warningf("*** SECCOMP WARNING: TSAN is enabled: syscall filters less restrictive!")
return seccomp.SyscallRules{
syscall.SYS_BRK: {},
syscall.SYS_CLOCK_NANOSLEEP: {},
syscall.SYS_CLONE: {},
syscall.SYS_FUTEX: {},
syscall.SYS_MADVISE: {},