Add arm specific syscalls to default seccomp profile

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com> Upstream-commit: 37d35f3c280dc27a00f2baa16431d807b24f8b92 Component: engine
2016-01-10 19:55:24 +00:00
parent e25e21a6d3
commit 1567cd421d
1 changed files with 16 additions and 0 deletions
@@ -1570,5 +1570,21 @@ var defaultSeccompProfile = &configs.Seccomp{
 			Action: configs.Allow,
 			Args:   []*configs.Arg{},
 		},
+		// arm specific syscalls
+		{
+			Name:   "breakpoint",
+			Action: configs.Allow,
+			Args:   []*configs.Arg{},
+		},
+		{
+			Name:   "cacheflush",
+			Action: configs.Allow,
+			Args:   []*configs.Arg{},
+		},
+		{
+			Name:   "set_tls",
+			Action: configs.Allow,
+			Args:   []*configs.Arg{},
+		},
 	},
 }