summary refs log tree commit diff
diff options
context:
space:
mode:
-rw-r--r--seccomp/x86_64/balloon_device.policy1
-rw-r--r--seccomp/x86_64/block_device.policy1
-rw-r--r--seccomp/x86_64/net_device.policy1
-rw-r--r--seccomp/x86_64/rng_device.policy1
-rw-r--r--seccomp/x86_64/vhost_net_device.policy1
-rw-r--r--seccomp/x86_64/vhost_vsock_device.policy1
-rw-r--r--seccomp/x86_64/wl_device.policy1
7 files changed, 7 insertions, 0 deletions
diff --git a/seccomp/x86_64/balloon_device.policy b/seccomp/x86_64/balloon_device.policy
index aa55273..8f56d4e 100644
--- a/seccomp/x86_64/balloon_device.policy
+++ b/seccomp/x86_64/balloon_device.policy
@@ -22,6 +22,7 @@ write: 1
 eventfd2: 1
 dup: 1
 poll: 1
+ppoll: 1
 getpid: 1
 # Allow PR_SET_NAME only.
 prctl: arg0 == 15
diff --git a/seccomp/x86_64/block_device.policy b/seccomp/x86_64/block_device.policy
index 55e50a3..ff5bc8f 100644
--- a/seccomp/x86_64/block_device.policy
+++ b/seccomp/x86_64/block_device.policy
@@ -25,6 +25,7 @@ clone: arg0 & 0x00010000
 write: 1
 eventfd2: 1
 poll: 1
+ppoll: 1
 getpid: 1
 # Allow PR_SET_NAME only.
 prctl: arg0 == 15
diff --git a/seccomp/x86_64/net_device.policy b/seccomp/x86_64/net_device.policy
index 6820665..af90a4d 100644
--- a/seccomp/x86_64/net_device.policy
+++ b/seccomp/x86_64/net_device.policy
@@ -13,6 +13,7 @@ mmap: arg2 in 0xfffffffb
 mprotect: arg2 in 0xfffffffb
 munmap: 1
 poll: 1
+ppoll: 1
 read: 1
 recvfrom: 1
 sched_getaffinity: 1
diff --git a/seccomp/x86_64/rng_device.policy b/seccomp/x86_64/rng_device.policy
index 4eeb7ed..7b9a2cc 100644
--- a/seccomp/x86_64/rng_device.policy
+++ b/seccomp/x86_64/rng_device.policy
@@ -22,6 +22,7 @@ clone: arg0 & 0x00010000
 write: 1
 eventfd2: 1
 poll: 1
+ppoll: 1
 getpid: 1
 # Allow PR_SET_NAME only.
 prctl: arg0 == 15
diff --git a/seccomp/x86_64/vhost_net_device.policy b/seccomp/x86_64/vhost_net_device.policy
index d64dd81..254c1c6 100644
--- a/seccomp/x86_64/vhost_net_device.policy
+++ b/seccomp/x86_64/vhost_net_device.policy
@@ -30,6 +30,7 @@ mmap: arg2 in 0xfffffffb
 mprotect: arg2 in 0xfffffffb
 munmap: 1
 poll: 1
+ppoll: 1
 read: 1
 recvfrom: 1
 sched_getaffinity: 1
diff --git a/seccomp/x86_64/vhost_vsock_device.policy b/seccomp/x86_64/vhost_vsock_device.policy
index 5b21d51..b04b51c 100644
--- a/seccomp/x86_64/vhost_vsock_device.policy
+++ b/seccomp/x86_64/vhost_vsock_device.policy
@@ -31,6 +31,7 @@ mmap: arg2 in 0xfffffffb
 mprotect: arg2 in 0xfffffffb
 munmap: 1
 poll: 1
+ppoll: 1
 read: 1
 connect: 1
 sendto: 1
diff --git a/seccomp/x86_64/wl_device.policy b/seccomp/x86_64/wl_device.policy
index bc1ebb6..cf7fb96 100644
--- a/seccomp/x86_64/wl_device.policy
+++ b/seccomp/x86_64/wl_device.policy
@@ -10,6 +10,7 @@ mmap: arg2 in 0xfffffffb
 mprotect: arg2 in 0xfffffffb
 munmap: 1
 poll: 1
+ppoll: 1
 read: 1
 recvfrom: 1
 sched_getaffinity: 1