seccomp: ppc64le: allow swapcontext
swapcontext seems to be used for coroutines in some languages (at least ruby), enough to have been added to other major engines by an actual user. Link: https://github.com/moby/moby/pull/43092 Link: https://github.com/systemd/systemd/pull/9487 Link: https://github.com/containerd/containerd/pull/6411 Signed-off-by: Dominique Martinet <dominique.martinet@atmark-techno.com>
This commit is contained in:
parent
f9fb2eba22
commit
237eb57a9b
|
|
@ -75,7 +75,6 @@ func DefaultProfile() *Seccomp {
|
|||
"pciconfig_write",
|
||||
"sgetmask",
|
||||
"ssetmask",
|
||||
"swapcontext",
|
||||
"swapoff",
|
||||
"swapon",
|
||||
"sysfs",
|
||||
|
|
@ -526,6 +525,7 @@ func DefaultProfile() *Seccomp {
|
|||
{
|
||||
Names: []string{
|
||||
"sync_file_range2",
|
||||
"swapcontext",
|
||||
},
|
||||
Action: ActAllow,
|
||||
Args: []*Arg{},
|
||||
|
|
|
|||
|
|
@ -79,7 +79,6 @@
|
|||
"pciconfig_write",
|
||||
"sgetmask",
|
||||
"ssetmask",
|
||||
"swapcontext",
|
||||
"swapoff",
|
||||
"swapon",
|
||||
"sysfs",
|
||||
|
|
@ -565,7 +564,8 @@
|
|||
},
|
||||
{
|
||||
"names": [
|
||||
"sync_file_range2"
|
||||
"sync_file_range2",
|
||||
"swapcontext"
|
||||
],
|
||||
"action": "SCMP_ACT_ALLOW",
|
||||
"args": [],
|
||||
|
|
|
|||
Loading…
Reference in New Issue