Skip to content

Update seccomp rules#166

Open
amphi wants to merge 2 commits into
cyberus-technology:gardenlinuxfrom
amphi:update-seccomp-rules
Open

Update seccomp rules#166
amphi wants to merge 2 commits into
cyberus-technology:gardenlinuxfrom
amphi:update-seccomp-rules

Conversation

@amphi
Copy link
Copy Markdown

@amphi amphi commented Jun 2, 2026

Updates the seccomp rules for the http-server and the event-monitor. Pipelines that failed because of seccomp violations are linked in the commits.

amphi added 2 commits June 2, 2026 09:39
Seccomp violation found in
https://gitlab.cyberus-technology.de/cyberus/cloud/libvirt/-/jobs/2109117

On-behalf-of: SAP sebastian.eydam@sap.com
Signed-off-by: Sebastian Eydam <sebastian.eydam@cyberus-technology.de>
Seccomp violation found in
https://gitlab.cyberus-technology.de/cyberus/cloud/libvirt/-/jobs/2109212

On-behalf-of: SAP sebastian.eydam@sap.com
Signed-off-by: Sebastian Eydam <sebastian.eydam@cyberus-technology.de>
@amphi amphi requested review from Coffeeri, phip1611 and scholzp June 2, 2026 07:49
@amphi amphi self-assigned this Jun 2, 2026
Copy link
Copy Markdown
Member

@phip1611 phip1611 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Amazing, outstanding, best in class PR 🥳

I have a couple of questions:

  • did you check what causes the read() in the event monitor thread?
  • did you check if this is also broken on upstream?

@amphi
Copy link
Copy Markdown
Author

amphi commented Jun 2, 2026

I only added the seccomp rules, I did no further checks. If we want to do that we should open a ticket for it, because checking what causes the read() may take some time.

@phip1611
Copy link
Copy Markdown
Member

phip1611 commented Jun 2, 2026

because checking what causes the read() may take some time.

To clarify: My question was about a 3 minute quick search with looking at the code, not a deep investigation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants