Commit b22876cc authored by Paul Moore's avatar Paul Moore Committed by Eduardo Otubo

seccomp: add semctl() to the syscall whitelist

QEMU needs to call semctl() for correct operation.  This particular
problem was identified on shutdown with the following commandline:

 # qemu -sandbox on -monitor stdio \
   -device intel-hda -device hda-duplex -vnc :0
Signed-off-by: 's avatarPaul Moore <pmoore@redhat.com>
Signed-off-by: 's avatarEduardo Otubo <eduardo.otubo@profitbricks.com>
parent 2656eb7c
......@@ -230,7 +230,8 @@ static const struct QemuSeccompSyscall seccomp_whitelist[] = {
{ SCMP_SYS(timerfd_create), 240 },
{ SCMP_SYS(shmctl), 240 },
{ SCMP_SYS(mlock), 240 },
{ SCMP_SYS(munlock), 240 }
{ SCMP_SYS(munlock), 240 },
{ SCMP_SYS(semctl), 240 }
};
int seccomp_start(void)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment