Add i386 specific modify_ldt syscall to default seccomp filter

This syscall is used by Go on i386 binaries, although not by libc.

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
This commit is contained in:
Justin Cormack 2016-01-10 12:00:11 +00:00
parent 7058495ab8
commit 13a9d4e899
1 changed files with 6 additions and 0 deletions

View File

@ -1564,5 +1564,11 @@ var defaultSeccompProfile = &configs.Seccomp{
Action: configs.Allow,
Args: []*configs.Arg{},
},
// i386 specific syscalls
{
Name: "modify_ldt",
Action: configs.Allow,
Args: []*configs.Arg{},
},
},
}