Skip to content

Commit a3f5d47

Browse files
AlexandruCihodaruluminitavoicu
authored andcommitted
[seccomp]: Allow mmap syscall with MAP_PRIVATE
When there is a large buffer sent there will be an attempt to map it using MAP_PRIVATE | MAP_ANONYMOUS flags. Signed-off-by: AlexandruCihodaru <cihodar@amazon.com>
1 parent 02da66e commit a3f5d47

File tree

2 files changed

+26
-0
lines changed

2 files changed

+26
-0
lines changed

resources/seccomp/aarch64-unknown-linux-musl.json

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -189,6 +189,19 @@
189189
}
190190
]
191191
},
192+
{
193+
"syscall": "mmap",
194+
"comment": "Used for large buffers sent to api_server",
195+
"args": [
196+
{
197+
"index": 3,
198+
"type": "dword",
199+
"op": "eq",
200+
"val": 34,
201+
"comment": " libc::MAP_ANONYMOUS | libc::MAP_PRIVATE"
202+
}
203+
]
204+
},
192205
{
193206
"syscall": "mmap",
194207
"comment": "Used for reading the timezone in LocalTime::now()",

resources/seccomp/x86_64-unknown-linux-musl.json

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -519,6 +519,19 @@
519519
}
520520
]
521521
},
522+
{
523+
"syscall": "mmap",
524+
"comment": "Used for large buffers sent to api_server",
525+
"args": [
526+
{
527+
"index": 3,
528+
"type": "dword",
529+
"op": "eq",
530+
"val": 34,
531+
"comment": " libc::MAP_ANONYMOUS | libc::MAP_PRIVATE"
532+
}
533+
]
534+
},
522535
{
523536
"syscall": "mmap",
524537
"comment": "Used for reading the timezone in LocalTime::now()",

0 commit comments

Comments
 (0)