Merge pull request #19217 from justincormack/arm_syscalls

Add arm specific syscalls to default seccomp profile Upstream-commit: a96a0b37818e26bea173aa718df92f50b21093c3 Component: engine
2016-01-11 15:26:09 -08:00
parent 8e7c65a2dd 1567cd421d
commit 622bd04e41
1 changed files with 16 additions and 0 deletions
--- a/components/engine/daemon/execdriver/native/seccomp_default.go
+++ b/components/engine/daemon/execdriver/native/seccomp_default.go
@ -1570,5 +1570,21 @@ var defaultSeccompProfile = &configs.Seccomp{
 			Action: configs.Allow,
 			Args:   []*configs.Arg{},
 		},
+		// arm specific syscalls
+		{
+			Name:   "breakpoint",
+			Action: configs.Allow,
+			Args:   []*configs.Arg{},
+		},
+		{
+			Name:   "cacheflush",
+			Action: configs.Allow,
+			Args:   []*configs.Arg{},
+		},
+		{
+			Name:   "set_tls",
+			Action: configs.Allow,
+			Args:   []*configs.Arg{},
+		},
 	},
 }