Merge pull request moby#46762 from akerouanton/seccomp-io_uring

seccomp: block io_uring_* syscalls in default profile
trebonian · Nov 2, 2023 · ec32f0d · ec32f0d
2 parents 2f138d8 + 891241e
commit ec32f0d
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 6 deletions.
diff --git a/profiles/seccomp/default.json b/profiles/seccomp/default.json
@@ -183,9 +183,6 @@
 				"ioprio_set",
 				"io_setup",
 				"io_submit",
-				"io_uring_enter",
-				"io_uring_register",
-				"io_uring_setup",
 				"ipc",
 				"kill",
 				"landlock_add_rule",

diff --git a/profiles/seccomp/default_linux.go b/profiles/seccomp/default_linux.go
@@ -175,9 +175,6 @@ func DefaultProfile() *Seccomp {
 					"ioprio_set",
 					"io_setup",
 					"io_submit",
-					"io_uring_enter",
-					"io_uring_register",
-					"io_uring_setup",
 					"ipc",
 					"kill",
 					"landlock_add_rule",