dilim/moby
1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2026-08-03 22:51:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #50077 from vvoland/update-syscalls

Browse Source 
profile/seccomp: Update to kernel v6.13 (libseccomp v2.6.0, containerd)
This commit is contained in:
Paweł Gronowski
2025-05-26 15:17:58 +00:00
committed by GitHub
parent d15f59243a 0ec3278d48
commit 536b35299b
2 changed files with 24 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
profiles/seccomp/default.json
View File

@@ -174,6 +174,7 @@
"getuid",
"getuid32",
"getxattr",
"getxattrat",
"inotify_add_watch",
"inotify_init",
"inotify_init1",
@@ -199,12 +200,17 @@
"link",
"linkat",
"listen",
"listmount",
"listxattr",
"listxattrat",
"llistxattr",
"_llseek",
"lremovexattr",
"lseek",
"lsetxattr",
"lsm_get_self_attr",
"lsm_list_modules",
"lsm_set_self_attrs",
"lstat",
"lstat64",
"madvise",
@@ -232,6 +238,7 @@
"mq_timedsend_time64",
"mq_unlink",
"mremap",
"mseal",
"msgctl",
"msgget",
"msgrcv",
@@ -281,10 +288,12 @@
"recvmsg",
"remap_file_pages",
"removexattr",
"removexattrat",
"rename",
"renameat",
"renameat2",
"restart_syscall",
"riscv_hwprobe",
"rmdir",
"rseq",
"rt_sigaction",
@@ -350,6 +359,7 @@
"setuid",
"setuid32",
"setxattr",
"setxattrat",
"shmat",
"shmctl",
"shmdt",
@@ -367,6 +377,7 @@
"stat64",
"statfs",
"statfs64",
"statmount",
"statx",
"symlink",
"symlinkat",
@@ -398,6 +409,7 @@
"uname",
"unlink",
"unlinkat",
"uretprobe",
"utime",
"utimensat",
"utimensat_time64",

12
profiles/seccomp/default_linux.go
View File

@@ -166,6 +166,7 @@ func DefaultProfile() *Seccomp {
"getuid",
"getuid32",
"getxattr",
"getxattrat", // kernel v6.13, libseccomp v2.6.0
"inotify_add_watch",
"inotify_init",
"inotify_init1",
@@ -191,12 +192,17 @@ func DefaultProfile() *Seccomp {
"link",
"linkat",
"listen",
"listmount", // kernel v6.8, libseccomp v2.6.0
"listxattr",
"listxattrat", // kernel v6.13, libseccomp v2.6.0
"llistxattr",
"_llseek",
"lremovexattr",
"lseek",
"lsetxattr",
"lsm_get_self_attr", // kernel v6.8, libseccomp v2.6.0
"lsm_list_modules", // kernel v6.8, libseccomp v2.6.0
"lsm_set_self_attrs", // kernel v6.8, libseccomp v2.6.0
"lstat",
"lstat64",
"madvise",
@@ -224,6 +230,7 @@ func DefaultProfile() *Seccomp {
"mq_timedsend_time64",
"mq_unlink",
"mremap",
"mseal", // kernel v6.9, libseccomp v2.6.0
"msgctl",
"msgget",
"msgrcv",
@@ -273,10 +280,12 @@ func DefaultProfile() *Seccomp {
"recvmsg",
"remap_file_pages",
"removexattr",
"removexattrat", // kernel v6.13, libseccomp v2.6.0
"rename",
"renameat",
"renameat2",
"restart_syscall",
"riscv_hwprobe", // kernel v6.12, libseccomp v2.6.0
"rmdir",
"rseq",
"rt_sigaction",
@@ -342,6 +351,7 @@ func DefaultProfile() *Seccomp {
"setuid",
"setuid32",
"setxattr",
"setxattrat", // kernel v6.13, libseccomp v2.6.0
"shmat",
"shmctl",
"shmdt",
@@ -359,6 +369,7 @@ func DefaultProfile() *Seccomp {
"stat64",
"statfs",
"statfs64",
"statmount", // kernel v6.8, libseccomp v2.6.0
"statx",
"symlink",
"symlinkat",
@@ -390,6 +401,7 @@ func DefaultProfile() *Seccomp {
"uname",
"unlink",
"unlinkat",
"uretprobe", // kernel v6.11, libseccomp v2.6.0
"utime",
"utimensat",
"utimensat_time64",