From 77e43adeab4abcd301d76222e0304f551fbcf0cc Mon Sep 17 00:00:00 2001
From: Fabricio Voznika <fvoznika@google.com>
Date: Wed, 3 Oct 2018 09:31:53 -0700
Subject: [PATCH] Add TIOCINQ to allowed seccomp when hostinet is used

PiperOrigin-RevId: 215574070
Change-Id: Ib36e804adebaf756adb9cbc2752be9789691530b
---
 runsc/boot/filter/config.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/runsc/boot/filter/config.go b/runsc/boot/filter/config.go
index 352c64253..06c04e3bb 100644
--- a/runsc/boot/filter/config.go
+++ b/runsc/boot/filter/config.go
@@ -335,6 +335,10 @@ func hostInetFilters() seccomp.SyscallRules {
 				seccomp.AllowAny{},
 				seccomp.AllowValue(syscall.TIOCOUTQ),
 			},
+			{
+				seccomp.AllowAny{},
+				seccomp.AllowValue(syscall.TIOCINQ),
+			},
 		},
 		syscall.SYS_LISTEN:   {},
 		syscall.SYS_READV:    {},