seccomp: whitelist io_pgetevents

avikivity · thaJeztah · commit 58bee8125b3c · 2019-03-20T12:03:42.000+01:00
io_pgetevents() is a new Linux system call, similar to the already-whitelisted io_getevents(). It has no security implications. Whitelist it so applications can use the new system call. Fixes #3105. Signed-off-by: Avi Kivity <avi@scylladb.com> (cherry picked from commit 4506eb4) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
diff --git a/contrib/seccomp/seccomp_default.go b/contrib/seccomp/seccomp_default.go
@@ -161,6 +161,7 @@ func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp {
 				"ioctl",
 				"io_destroy",
 				"io_getevents",
+				"io_pgetevents",
 				"ioprio_get",
 				"ioprio_set",
 				"io_setup",
