From f55c46c8ed7d2dca714953c67e930c8924a9d57b Mon Sep 17 00:00:00 2001
From: Andrei Vagin <avagin@gmail.com>
Date: Wed, 29 Jun 2022 15:59:26 -0700
Subject: [PATCH] platform/kvm: allow KVM_{G,S}ET_REGS in seccomp filters

They are used in bluepillReadyStopGuest to ajust rflags.

Fixes: #7600
---
 pkg/sentry/platform/kvm/filters.go | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/pkg/sentry/platform/kvm/filters.go b/pkg/sentry/platform/kvm/filters.go
index 6c5cba895..99f93007e 100644
--- a/pkg/sentry/platform/kvm/filters.go
+++ b/pkg/sentry/platform/kvm/filters.go
@@ -34,6 +34,14 @@ func (k *KVM) SyscallFilters() seccomp.SyscallRules {
 				seccomp.MatchAny{},
 				seccomp.EqualTo(_KVM_SET_USER_MEMORY_REGION),
 			},
+			{
+				seccomp.MatchAny{},
+				seccomp.EqualTo(_KVM_GET_REGS),
+			},
+			{
+				seccomp.MatchAny{},
+				seccomp.EqualTo(_KVM_SET_REGS),
+			},
 		},
 		unix.SYS_MEMBARRIER: []seccomp.Rule{
 			{