Skip to content

Commit 346412f

Browse files
henry118swagatbora90
authored andcommitted
adding support of CAP_BPF and CAP_PERFMON
Signed-off-by: Henry Wang <henwang@amazon.com> (cherry picked from commit 4390751) Signed-off-by: Swagat Bora <sbora@amazon.com>
1 parent 8b9c35a commit 346412f

File tree

1 file changed

+12
-0
lines changed

1 file changed

+12
-0
lines changed

contrib/seccomp/seccomp_default.go

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -658,6 +658,18 @@ func DefaultProfile(sp *specs.Spec) *specs.LinuxSeccomp {
658658
Action: specs.ActAllow,
659659
Args: []specs.LinuxSeccompArg{},
660660
})
661+
case "CAP_BPF":
662+
s.Syscalls = append(s.Syscalls, specs.LinuxSyscall{
663+
Names: []string{"bpf"},
664+
Action: specs.ActAllow,
665+
Args: []specs.LinuxSeccompArg{},
666+
})
667+
case "CAP_PERFMON":
668+
s.Syscalls = append(s.Syscalls, specs.LinuxSyscall{
669+
Names: []string{"perf_event_open"},
670+
Action: specs.ActAllow,
671+
Args: []specs.LinuxSeccompArg{},
672+
})
661673
}
662674
}
663675

0 commit comments

Comments
 (0)