Allow sync_file_range2 on supported architectures.

dargor · justincormack · commit aedc0ca2fdfc · 2017-02-18T15:53:09.000Z
Signed-off-by: Gabriel Linder &lt;linder.gabriel@gmail.com&gt;
diff --git a/profiles/seccomp/default.json b/profiles/seccomp/default.json
@@ -415,10 +415,25 @@
 			"includes": {},
 			"excludes": {}
 		},
+		{
+			"names": [
+				"sync_file_range2"
+			],
+			"action": "SCMP_ACT_ALLOW",
+			"args": [],
+			"comment": "",
+			"includes": {
+				"arches": [
+					"ppc64le"
+				]
+			},
+			"excludes": {}
+		},
 		{
 			"names": [
 				"arm_fadvise64_64",
 				"arm_sync_file_range",
+				"sync_file_range2",
 				"breakpoint",
 				"cacheflush",
 				"set_tls"
diff --git a/profiles/seccomp/seccomp_default.go b/profiles/seccomp/seccomp_default.go
@@ -388,10 +388,21 @@ func DefaultProfile() *types.Seccomp {
 				},
 			},
 		},
+		{
+			Names: []string{
+				"sync_file_range2",
+			},
+			Action: types.ActAllow,
+			Args:   []*types.Arg{},
+			Includes: types.Filter{
+				Arches: []string{"ppc64le"},
+			},
+		},
 		{
 			Names: []string{
 				"arm_fadvise64_64",
 				"arm_sync_file_range",
+				"sync_file_range2",
 				"breakpoint",
 				"cacheflush",
 				"set_tls",
