From: Andrew Jones <drjo...@redhat.com> cacheflush is an arm-specific syscall that qemu built for arm uses. Add it to the whitelist.
Signed-off-by: Andrew Jones <drjo...@redhat.com> Acked-by: Eduardo Otubo <eduardo.ot...@profitbricks.com> --- qemu-seccomp.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/qemu-seccomp.c b/qemu-seccomp.c index f9de0d3..33644a4 100644 --- a/qemu-seccomp.c +++ b/qemu-seccomp.c @@ -237,7 +237,8 @@ static const struct QemuSeccompSyscall seccomp_whitelist[] = { { SCMP_SYS(fadvise64), 240 }, { SCMP_SYS(inotify_init1), 240 }, { SCMP_SYS(inotify_add_watch), 240 }, - { SCMP_SYS(mbind), 240 } + { SCMP_SYS(mbind), 240 }, + { SCMP_SYS(cacheflush), 240 }, }; int seccomp_start(void) -- 2.1.4