[Qemu-devel] [PATCH v8 27/27] seccomp: add memfd_create to whitelist

[marcandre . lureau]

From: Eduardo Otubo <eduardo.ot...@profitbricks.com>

This is used by memfd code.

Signed-off-by: Eduardo Otubo <eduardo.ot...@profitbricks.com>
Signed-off-by: Marc-André Lureau <marcandre.lur...@redhat.com>
---
 qemu-seccomp.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/qemu-seccomp.c b/qemu-seccomp.c
index f9de0d3..80d034a 100644
--- a/qemu-seccomp.c
+++ b/qemu-seccomp.c
@@ -237,7 +237,8 @@ static const struct QemuSeccompSyscall seccomp_whitelist[] 
= {
     { SCMP_SYS(fadvise64), 240 },
     { SCMP_SYS(inotify_init1), 240 },
     { SCMP_SYS(inotify_add_watch), 240 },
-    { SCMP_SYS(mbind), 240 }
+    { SCMP_SYS(mbind), 240 },
+    { SCMP_SYS(memfd_create), 240 }
 };
 
 int seccomp_start(void)
-- 
2.4.3