diff options
| author | Justin Cormack <justin.cormack@docker.com> | 2022-05-13 10:41:53 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-05-13 10:41:53 +0100 |
| commit | f1dd6bf84e28930e1ccd903361f9284fb22d3b8a (patch) | |
| tree | a43b79d6d1a55fad2a8cb4901fa6cda3ba4b78f6 | |
| parent | e9712464ade03088abb83cdf75ace417cb9a8f89 (diff) | |
| parent | 4c2f18f6cca5a89c1e0828a18f01e90ac40fc9b9 (diff) | |
| download | docker-f1dd6bf84e28930e1ccd903361f9284fb22d3b8a.tar.gz | |
Merge pull request #43553 from AkihiroSuda/riscv64
seccomp: support riscv64
| -rw-r--r-- | profiles/seccomp/default.json | 15 | ||||
| -rw-r--r-- | profiles/seccomp/default_linux.go | 15 |
2 files changed, 30 insertions, 0 deletions
diff --git a/profiles/seccomp/default.json b/profiles/seccomp/default.json index 73ad2d6418..37e6febf53 100644 --- a/profiles/seccomp/default.json +++ b/profiles/seccomp/default.json @@ -48,6 +48,10 @@ "subArchitectures": [ "SCMP_ARCH_S390" ] + }, + { + "architecture": "SCMP_ARCH_RISCV64", + "subArchitectures": null } ], "syscalls": [ @@ -545,6 +549,17 @@ }, { "names": [ + "riscv_flush_icache" + ], + "action": "SCMP_ACT_ALLOW", + "includes": { + "arches": [ + "riscv64" + ] + } + }, + { + "names": [ "open_by_handle_at" ], "action": "SCMP_ACT_ALLOW", diff --git a/profiles/seccomp/default_linux.go b/profiles/seccomp/default_linux.go index fbd725758b..ca6dfd4661 100644 --- a/profiles/seccomp/default_linux.go +++ b/profiles/seccomp/default_linux.go @@ -35,6 +35,10 @@ func arches() []Architecture { Arch: specs.ArchS390X, SubArches: []specs.Arch{specs.ArchS390}, }, + { + Arch: specs.ArchRISCV64, + SubArches: nil, + }, } } @@ -536,6 +540,17 @@ func DefaultProfile() *Seccomp { { LinuxSyscall: specs.LinuxSyscall{ Names: []string{ + "riscv_flush_icache", + }, + Action: specs.ActAllow, + }, + Includes: &Filter{ + Arches: []string{"riscv64"}, + }, + }, + { + LinuxSyscall: specs.LinuxSyscall{ + Names: []string{ "open_by_handle_at", }, Action: specs.ActAllow, |