mirror of
https://github.com/netbirdio/gvisor.git
synced 2026-05-22 17:12:49 -07:00
Merge pull request #7776 from avagin:kvm-filters
PiperOrigin-RevId: 458102625
This commit is contained in:
@@ -34,6 +34,14 @@ func (k *KVM) SyscallFilters() seccomp.SyscallRules {
|
||||
seccomp.MatchAny{},
|
||||
seccomp.EqualTo(_KVM_SET_USER_MEMORY_REGION),
|
||||
},
|
||||
{
|
||||
seccomp.MatchAny{},
|
||||
seccomp.EqualTo(_KVM_GET_REGS),
|
||||
},
|
||||
{
|
||||
seccomp.MatchAny{},
|
||||
seccomp.EqualTo(_KVM_SET_REGS),
|
||||
},
|
||||
},
|
||||
unix.SYS_MEMBARRIER: []seccomp.Rule{
|
||||
{
|
||||
|
||||
Reference in New Issue
Block a user