Skip to content

Commit 92b59b8

Browse files
committed
chore(rust): update seccomp filters
New rust version brought new syscalls: This commit: 426ab142507fca8704d934da556f1c96b0fd61b2 which updated `write` function for unix sockets to use `sendto` syscall. - Added `sendto` to API and VMM filters And this PR: rust-lang/rust#115746 which added call to `gettid` during panic. - Added `gettid` to API, VMM and VCPU filters Signed-off-by: Egor Lazarchuk <yegorlz@amazon.co.uk>
1 parent 03484b2 commit 92b59b8

2 files changed

Lines changed: 40 additions & 0 deletions

File tree

resources/seccomp/aarch64-unknown-linux-musl.json

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -65,6 +65,10 @@
6565
"syscall": "brk",
6666
"comment": "Called for expanding the heap"
6767
},
68+
{
69+
"syscall": "gettid",
70+
"comment": "Rust std uses it during panic to print the thread id."
71+
},
6872
{
6973
"syscall": "clock_gettime",
7074
"comment": "Used for metrics and logging, via the helpers in utils/src/time.rs. It's not called on some platforms, because of vdso optimisations."
@@ -319,6 +323,10 @@
319323
}
320324
]
321325
},
326+
{
327+
"syscall": "sendto",
328+
"comment": "Rust std uses it to write to unix socket"
329+
},
322330
{
323331
"syscall": "tkill",
324332
"comment": "tkill is used by libc::abort during a panic to raise SIGABRT",
@@ -511,6 +519,10 @@
511519
"syscall": "brk",
512520
"comment": "Called for expanding the heap"
513521
},
522+
{
523+
"syscall": "gettid",
524+
"comment": "Rust std uses it during panic to print the thread id."
525+
},
514526
{
515527
"syscall": "clock_gettime",
516528
"comment": "Used for metrics and logging, via the helpers in utils/src/time.rs. It's not called on some platforms, because of vdso optimisations."
@@ -729,6 +741,10 @@
729741
}
730742
]
731743
},
744+
{
745+
"syscall": "sendto",
746+
"comment": "Rust std uses it to write to unix socket"
747+
},
732748
{
733749
"syscall": "tkill",
734750
"comment": "tkill is used by libc::abort during a panic to raise SIGABRT",
@@ -792,6 +808,10 @@
792808
"syscall": "brk",
793809
"comment": "Called for expanding the heap"
794810
},
811+
{
812+
"syscall": "gettid",
813+
"comment": "Rust std uses it during panic to print the thread id."
814+
},
795815
{
796816
"syscall": "clock_gettime",
797817
"comment": "Used for metrics and logging, via the helpers in utils/src/time.rs. It's not called on some platforms, because of vdso optimisations."

resources/seccomp/x86_64-unknown-linux-musl.json

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -65,6 +65,10 @@
6565
"syscall": "brk",
6666
"comment": "Called for expanding the heap"
6767
},
68+
{
69+
"syscall": "gettid",
70+
"comment": "Rust std uses it during panic to print the thread id."
71+
},
6872
{
6973
"syscall": "clock_gettime",
7074
"comment": "Used for metrics and logging, via the helpers in utils/src/time.rs. It's not called on some platforms, because of vdso optimisations."
@@ -319,6 +323,10 @@
319323
}
320324
]
321325
},
326+
{
327+
"syscall": "sendto",
328+
"comment": "Rust std uses it to write to unix socket"
329+
},
322330
{
323331
"syscall": "tkill",
324332
"comment": "tkill is used by libc::abort during a panic to raise SIGABRT",
@@ -523,6 +531,10 @@
523531
"syscall": "brk",
524532
"comment": "Called for expanding the heap"
525533
},
534+
{
535+
"syscall": "gettid",
536+
"comment": "Rust std uses it during panic to print the thread id."
537+
},
526538
{
527539
"syscall": "clock_gettime",
528540
"comment": "Used for metrics and logging, via the helpers in utils/src/time.rs. It's not called on some platforms, because of vdso optimisations."
@@ -741,6 +753,10 @@
741753
}
742754
]
743755
},
756+
{
757+
"syscall": "sendto",
758+
"comment": "Rust std uses it to write to unix socket"
759+
},
744760
{
745761
"syscall": "tkill",
746762
"comment": "tkill is used by libc::abort during a panic to raise SIGABRT",
@@ -804,6 +820,10 @@
804820
"syscall": "brk",
805821
"comment": "Called for expanding the heap"
806822
},
823+
{
824+
"syscall": "gettid",
825+
"comment": "Rust std uses it during panic to print the thread id."
826+
},
807827
{
808828
"syscall": "clock_gettime",
809829
"comment": "Used for metrics and logging, via the helpers in utils/src/time.rs. It's not called on some platforms, because of vdso optimisations."

0 commit comments

Comments
 (0)