[Virtio-fs] [PATCH] virtiofsd: Seccomp: Add 'send' for syslog
Dr. David Alan Gilbert
dgilbert at redhat.com
Mon Nov 2 15:13:50 UTC 2020
* Philippe Mathieu-Daudé (philmd at redhat.com) wrote:
> On 11/2/20 4:07 PM, Dr. David Alan Gilbert (git) wrote:
> > From: "Dr. David Alan Gilbert" <dgilbert at redhat.com>
> >
> > On ppc it looks like syslog ends up using 'send' rather than 'sendto'.
> >
> > Reference: https://github.com/kata-containers/kata-containers/issues/1050
> >
> > Reported-by: amulmek1 at in.ibm.com
> > Signed-off-by: Dr. David Alan Gilbert <dgilbert at redhat.com>
> > ---
> > tools/virtiofsd/passthrough_seccomp.c | 1 +
> > 1 file changed, 1 insertion(+)
> >
> > diff --git a/tools/virtiofsd/passthrough_seccomp.c b/tools/virtiofsd/passthrough_seccomp.c
> > index eb9af8265f..672fb72a31 100644
> > --- a/tools/virtiofsd/passthrough_seccomp.c
> > +++ b/tools/virtiofsd/passthrough_seccomp.c
> > @@ -118,6 +118,7 @@ static const int syscall_whitelist[] = {
> >
> > /* Syscalls used when --syslog is enabled */
> > static const int syscall_whitelist_syslog[] = {
>
> Is it worth restricting the syscall to POWER?
>
> #if defined(__powerpc64__)
I don't think so, since it's legal for a libc to use either;
so any other libc or architecture could choose either to use.
Dave
> > + SCMP_SYS(send),
>
> #endif
>
> > SCMP_SYS(sendto),
> > };
> >
> >
>
--
Dr. David Alan Gilbert / dgilbert at redhat.com / Manchester, UK
More information about the Virtio-fs
mailing list