fix(seccomp): add KVMCLOCK_CTRL ioctl on x86_64

This is to be able to call KVMCLOCK_CTRL ioctl in a vCPU thread. Signed-off-by: Nikita Kalyazin <[email protected]> Signed-off-by: Babis Chalios <[email protected]>
firecracker-microvm · Oct 22, 2024 · 18b2f34 · 18b2f34
1 parent 51c0122
commit 18b2f34
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/resources/seccomp/x86_64-unknown-linux-musl.json b/resources/seccomp/x86_64-unknown-linux-musl.json
@@ -1254,6 +1254,18 @@
                     }
                 ]
             },
+            {
+                "syscall": "ioctl",
+                "args": [
+                    {
+                        "index": 1,
+                        "type": "dword",
+                        "op": "eq",
+                        "val": 44717,
+                        "comment": "KVM_KVMCLOCK_CTRL"
+                    }
+                ]
+            },
             {
                 "syscall": "sched_yield",
                 "comment": "Used by the rust standard library in std::sync::mpmc. Firecracker uses mpsc channels from this module for inter-thread communication"