fix(seccomp): add KVMCLOCK_CTRL ioctl on x86_64

kalyazin · kalyazin · commit a8ad9206f55b · 2024-02-19T16:19:10.000Z
This is to be able to call KVMCLOCK_CTRL ioctl in
a vCPU thread.

Signed-off-by: Nikita Kalyazin &lt;kalyazin@amazon.com&gt;
diff --git a/resources/seccomp/x86_64-unknown-linux-musl.json b/resources/seccomp/x86_64-unknown-linux-musl.json
@@ -1238,6 +1238,18 @@
                     }
                 ]
             },
+            {
+                "syscall": "ioctl",
+                "args": [
+                    {
+                        "index": 1,
+                        "type": "dword",
+                        "op": "eq",
+                        "val": 44717,
+                        "comment": "KVM_KVMCLOCK_CTRL"
+                    }
+                ]
+            },
             {
                 "syscall": "sched_yield",
                 "comment": "Used by the rust standard library in std::sync::mpmc. Firecracker uses mpsc channels from this module for inter-thread communication"

Original file line number	Diff line number	Diff line change
`@@ -1238,6 +1238,18 @@`
`1238`	`1238`	`}`
`1239`	`1239`	`]`
`1240`	`1240`	`},`
	`1241`	`+ {`
	`1242`	`+ "syscall": "ioctl",`
	`1243`	`+ "args": [`
	`1244`	`+ {`
	`1245`	`+ "index": 1,`
	`1246`	`+ "type": "dword",`
	`1247`	`+ "op": "eq",`
	`1248`	`+ "val": 44717,`
	`1249`	`+ "comment": "KVM_KVMCLOCK_CTRL"`
	`1250`	`+ }`
	`1251`	`+ ]`
	`1252`	`+ },`
`1241`	`1253`	`{`
`1242`	`1254`	`"syscall": "sched_yield",`
`1243`	`1255`	`"comment": "Used by the rust standard library in std::sync::mpmc. Firecracker uses mpsc channels from this module for inter-thread communication"`