[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH] virtiofsd: Seccomp: Add 'send' for syslog
|
From: |
Philippe Mathieu-Daudé |
|
Subject: |
Re: [PATCH] virtiofsd: Seccomp: Add 'send' for syslog |
|
Date: |
Mon, 2 Nov 2020 16:11:44 +0100 |
|
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.3.1 |
On 11/2/20 4:07 PM, Dr. David Alan Gilbert (git) wrote:
> From: "Dr. David Alan Gilbert" <dgilbert@redhat.com>
>
> On ppc it looks like syslog ends up using 'send' rather than 'sendto'.
>
> Reference: https://github.com/kata-containers/kata-containers/issues/1050
>
> Reported-by: amulmek1@in.ibm.com
> Signed-off-by: Dr. David Alan Gilbert <dgilbert@redhat.com>
> ---
> tools/virtiofsd/passthrough_seccomp.c | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/tools/virtiofsd/passthrough_seccomp.c
> b/tools/virtiofsd/passthrough_seccomp.c
> index eb9af8265f..672fb72a31 100644
> --- a/tools/virtiofsd/passthrough_seccomp.c
> +++ b/tools/virtiofsd/passthrough_seccomp.c
> @@ -118,6 +118,7 @@ static const int syscall_whitelist[] = {
>
> /* Syscalls used when --syslog is enabled */
> static const int syscall_whitelist_syslog[] = {
Is it worth restricting the syscall to POWER?
#if defined(__powerpc64__)
> + SCMP_SYS(send),
#endif
> SCMP_SYS(sendto),
> };
>
>