Remove SYS_futex
, SYS_write
, SYS_close
, and SYS_mmap
from list of default allowed syscalls for seccomp on Linux
#183
Labels
area/security
Involves security-related changes or fixes
lifecycle/confirmed
Bug is verified or proposal seems reasonable
Milestone
Currently, we allow
SYS_futex
,SYS_write
,SYS_close
, andSYS_mmap
(hyperlight/src/hyperlight_host/src/seccomp/guest.rs
Line 56 in b9c67fb
UninitializedSandbox::new
(hyperlight/src/hyperlight_host/src/sandbox/uninitialized.rs
Line 125 in b9c67fb
UninitializedSandbox::new
to leverage a builder pattern.The text was updated successfully, but these errors were encountered: