Add i386 specific modify_ldt syscall to default seccomp filter

This syscall is used by Go on i386 binaries, although not by libc.

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
Upstream-commit: 13a9d4e8993997b2bf9be7e96a8d7978a73d0b9b
Component: engine
This commit is contained in:
Justin Cormack
2016-01-10 12:00:11 +00:00
parent b9cea74caa
commit fd32c5b230

View File

@ -1564,5 +1564,11 @@ var defaultSeccompProfile = &configs.Seccomp{
Action: configs.Allow,
Args: []*configs.Arg{},
},
// i386 specific syscalls
{
Name: "modify_ldt",
Action: configs.Allow,
Args: []*configs.Arg{},
},
},
}