seccomp: whitelist io_pgetevents

avikivity · avikivity · commit 4506eb45bf40 · 2019-03-19T11:56:32.000+02:00
io_pgetevents() is a new Linux system call, similar to the already-whitelisted io_getevents(). It has no security implications. Whitelist it so applications can use the new system call. Fixes #3105. Signed-off-by: Avi Kivity <avi@scylladb.com>
diff --git a/contrib/seccomp/seccomp_default.go b/contrib/seccomp/seccomp_default.go
@@ -161,6 +161,7 @@ func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp {
 				"ioctl",
 				"io_destroy",
 				"io_getevents",
+				"io_pgetevents",
 				"ioprio_get",
 				"ioprio_set",
 				"io_setup",
