chore: Update seccomp filters to include sched_yield

With rust 1.67.0, the implementation for std::sync::mpmc (which we transitively use through using mpsc channels) got switched out for crossbeam's implementation, which includes a `sched_yield` syscall [1]. [1]: https://github.com/rust-lang/rust/blame/cf32b9de1e8f66526c36ad2927458558d2e81093/library/std/src/sync/mpmc/utils.rs#L130 Signed-off-by: Patrick Roy <[email protected]>
firecracker-microvm · Apr 3, 2023 · 2fbbd9e · 2fbbd9e
1 parent 7843fa9
commit 2fbbd9e
Show file tree

Hide file tree

Showing 2 changed files with 24 additions and 0 deletions.
diff --git a/resources/seccomp/aarch64-unknown-linux-musl.json b/resources/seccomp/aarch64-unknown-linux-musl.json
@@ -429,6 +429,10 @@
                         "comment": "KVM_GET_DEVICE_ATTR"
                     }
                 ]
+            },
+            {
+                "syscall": "sched_yield",
+                "comment": "Used by the rust standard library in std::sync::mpmc. Firecracker uses mpsc channels from this module for inter-thread communication"
             }
         ]
     },
@@ -690,6 +694,10 @@
                         "comment": "FIONBIO"
                     }
                 ]
+            },
+            {
+                "syscall": "sched_yield",
+                "comment": "Used by the rust standard library in std::sync::mpmc. Firecracker uses mpsc channels from this module for inter-thread communication"
             }
         ]
     },
@@ -968,6 +976,10 @@
                         "comment": "KVM_GET_REG_LIST"
                     }
                 ]
+            },
+            {
+                "syscall": "sched_yield",
+                "comment": "Used by the rust standard library in std::sync::mpmc. Firecracker uses mpsc channels from this module for inter-thread communication"
             }
         ]
     }

diff --git a/resources/seccomp/x86_64-unknown-linux-musl.json b/resources/seccomp/x86_64-unknown-linux-musl.json
@@ -441,6 +441,10 @@
                         "comment": "KVM_GET_PIT2"
                     }
                 ]
+            },
+            {
+                "syscall": "sched_yield",
+                "comment": "Used by the rust standard library in std::sync::mpmc. Firecracker uses mpsc channels from this module for inter-thread communication"
             }
         ]
     },
@@ -702,6 +706,10 @@
                         "comment": "FIONBIO"
                     }
                 ]
+            },
+            {
+                "syscall": "sched_yield",
+                "comment": "Used by the rust standard library in std::sync::mpmc. Firecracker uses mpsc channels from this module for inter-thread communication"
             }
         ]
     },
@@ -1172,6 +1180,10 @@
                         "comment": "KVM_GET_TSC_KHZ"
                     }
                 ]
+            },
+            {
+                "syscall": "sched_yield",
+                "comment": "Used by the rust standard library in std::sync::mpmc. Firecracker uses mpsc channels from this module for inter-thread communication"
             }
         ]
     }