Commit 4b45b055 authored by Paolo Bonzini's avatar Paolo Bonzini Committed by Eduardo Otubo

seccomp: add mlockall to whitelist

This is used by "-realtime mlock=on".
Signed-off-by: 's avatarEduardo Otubo <eduardo.otubo@profitbricks.com>
Signed-off-by: 's avatarPaolo Bonzini <pbonzini@redhat.com>
Reviewed-by: 's avatarAmit Shah <amit.shah@redhat.com>
Reviewed-by: 's avatarEduardo Habkost <ehabkost@redhat.com>
Tested-by: 's avatarEduardo Habkost <ehabkost@redhat.com>
Acked-by: 's avatarEduardo Otubo <eduardo.otubo@profitbricks.com>
parent 8f970eff
......@@ -229,6 +229,7 @@ static const struct QemuSeccompSyscall seccomp_whitelist[] = {
{ SCMP_SYS(shmdt), 240 },
{ SCMP_SYS(timerfd_create), 240 },
{ SCMP_SYS(shmctl), 240 },
{ SCMP_SYS(mlockall), 240 },
{ SCMP_SYS(mlock), 240 },
{ SCMP_SYS(munlock), 240 },
{ SCMP_SYS(semctl), 240 },
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment