seccomp: ppc64le: allow swapcontext

swapcontext seems to be used for coroutines in some languages (at least
ruby), enough to have been added to other major engines by an actual user.

Link: https://github.com/moby/moby/pull/43092
Link: https://github.com/systemd/systemd/pull/9487
Link: https://github.com/containerd/containerd/pull/6411
Signed-off-by: Dominique Martinet <dominique.martinet@atmark-techno.com>
This commit is contained in:
Dominique Martinet 2024-06-04 11:28:28 +09:00
parent f9fb2eba22
commit 237eb57a9b
2 changed files with 3 additions and 3 deletions

View File

@ -75,7 +75,6 @@ func DefaultProfile() *Seccomp {
"pciconfig_write",
"sgetmask",
"ssetmask",
"swapcontext",
"swapoff",
"swapon",
"sysfs",
@ -526,6 +525,7 @@ func DefaultProfile() *Seccomp {
{
Names: []string{
"sync_file_range2",
"swapcontext",
},
Action: ActAllow,
Args: []*Arg{},

View File

@ -79,7 +79,6 @@
"pciconfig_write",
"sgetmask",
"ssetmask",
"swapcontext",
"swapoff",
"swapon",
"sysfs",
@ -565,7 +564,8 @@
},
{
"names": [
"sync_file_range2"
"sync_file_range2",
"swapcontext"
],
"action": "SCMP_ACT_ALLOW",
"args": [],