fix(seccomp): add KVMCLOCK_CTRL ioctl on x86_64

kalyazin · bchalios · commit e7d42e3bcfca · 2024-10-24T11:21:11.000+02:00
This is to be able to call KVMCLOCK_CTRL ioctl in
a vCPU thread.

Signed-off-by: Nikita Kalyazin &lt;kalyazin@amazon.com&gt;
Signed-off-by: Babis Chalios &lt;bchalios@amazon.es&gt;
diff --git a/resources/seccomp/x86_64-unknown-linux-musl.json b/resources/seccomp/x86_64-unknown-linux-musl.json
@@ -1254,6 +1254,18 @@
                     }
                 ]
             },
+            {
+                "syscall": "ioctl",
+                "args": [
+                    {
+                        "index": 1,
+                        "type": "dword",
+                        "op": "eq",
+                        "val": 44717,
+                        "comment": "KVM_KVMCLOCK_CTRL. We call this after pausing vCPUs to avoid soft lockups in the guest."
+                    }
+                ]
+            },
             {
                 "syscall": "sched_yield",
                 "comment": "Used by the rust standard library in std::sync::mpmc. Firecracker uses mpsc channels from this module for inter-thread communication"

Original file line number	Diff line number	Diff line change
`@@ -1254,6 +1254,18 @@`
`1254`	`1254`	`}`
`1255`	`1255`	`]`
`1256`	`1256`	`},`
	`1257`	`+ {`
	`1258`	`+ "syscall": "ioctl",`
	`1259`	`+ "args": [`
	`1260`	`+ {`
	`1261`	`+ "index": 1,`
	`1262`	`+ "type": "dword",`
	`1263`	`+ "op": "eq",`
	`1264`	`+ "val": 44717,`
	`1265`	`+ "comment": "KVM_KVMCLOCK_CTRL. We call this after pausing vCPUs to avoid soft lockups in the guest."`
	`1266`	`+ }`
	`1267`	`+ ]`
	`1268`	`+ },`
`1257`	`1269`	`{`
`1258`	`1270`	`"syscall": "sched_yield",`
`1259`	`1271`	`"comment": "Used by the rust standard library in std::sync::mpmc. Firecracker uses mpsc channels from this module for inter-thread communication"`