netbird/gvisor
0
0
Fork 0
mirror of https://github.com/netbirdio/gvisor.git synced 2026-05-22 17:12:49 -07:00
Code Issues Packages Projects Releases Wiki Activity

runsc/seccomp: allow sched_getaffinity if race is on

Browse Source 
Reported-by: syzbot+a9d200b7b966fb93070d@syzkaller.appspotmail.com
PiperOrigin-RevId: 547926332
This commit is contained in:
Andrei Vagin
2023-07-13 14:42:52 -07:00
committed by gVisor bot
parent 21dbd18156
commit 8b57c2e740
2 changed files with 25 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
runsc/boot/filter/extra_filters_race.go
+12 -11
View File
@@ -26,16 +26,17 @@ import (
func instrumentationFilters() seccomp.SyscallRules {
Report("TSAN is enabled: syscall filters less restrictive!")
return archInstrumentationFilters(seccomp.SyscallRules{
unix.SYS_BRK: {},
unix.SYS_CLOCK_NANOSLEEP: {},
unix.SYS_CLONE: {},
unix.SYS_CLONE3: {},
unix.SYS_FUTEX: {},
unix.SYS_MMAP: {},
unix.SYS_MUNLOCK: {},
unix.SYS_NANOSLEEP: {},
unix.SYS_OPENAT: {},
unix.SYS_RSEQ: {},
unix.SYS_SET_ROBUST_LIST: {},
unix.SYS_BRK: {},
unix.SYS_CLOCK_NANOSLEEP: {},
unix.SYS_CLONE: {},
unix.SYS_CLONE3: {},
unix.SYS_FUTEX: {},
unix.SYS_MMAP: {},
unix.SYS_MUNLOCK: {},
unix.SYS_NANOSLEEP: {},
unix.SYS_OPENAT: {},
unix.SYS_RSEQ: {},
unix.SYS_SET_ROBUST_LIST: {},
unix.SYS_SCHED_GETAFFINITY: {},
})
}
runsc/fsgofer/filter/extra_filters_race.go
+13 -12
View File
@@ -27,17 +27,18 @@ import (
func instrumentationFilters() seccomp.SyscallRules {
log.Warningf("*** SECCOMP WARNING: TSAN is enabled: syscall filters less restrictive!")
return archInstrumentationFilters(seccomp.SyscallRules{
unix.SYS_BRK: {},
unix.SYS_CLOCK_NANOSLEEP: {},
unix.SYS_CLONE: {},
unix.SYS_CLONE3: {},
unix.SYS_FUTEX: {},
unix.SYS_MADVISE: {},
unix.SYS_MMAP: {},
unix.SYS_MUNLOCK: {},
unix.SYS_NANOSLEEP: {},
unix.SYS_OPENAT: {},
unix.SYS_RSEQ: {},
unix.SYS_SET_ROBUST_LIST: {},
unix.SYS_BRK: {},
unix.SYS_CLOCK_NANOSLEEP: {},
unix.SYS_CLONE: {},
unix.SYS_CLONE3: {},
unix.SYS_FUTEX: {},
unix.SYS_MADVISE: {},
unix.SYS_MMAP: {},
unix.SYS_MUNLOCK: {},
unix.SYS_NANOSLEEP: {},
unix.SYS_OPENAT: {},
unix.SYS_RSEQ: {},
unix.SYS_SET_ROBUST_LIST: {},
unix.SYS_SCHED_GETAFFINITY: {},
})
}