Enable specific ioctl call for EP11 crypto card (s390)

The EP11 crypto card needs to make an ioctl call, which receives an
specific argument. This crypto card is for s390 only.

Signed-off-by: Eduardo Barretto <ebarretto@linux.vnet.ibm.com>

diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
index 39dc289e3e104e99b54763f89303e340ab64d948..b5cda70bbbaff0190fc5690dcaf47bd185f7968b 100644 (file)
--- a/sandbox-seccomp-filter.c
+++ b/sandbox-seccomp-filter.c
@@ -282,6 +282,8 @@ static const struct sock_filter preauth_insns[] = {
        SC_ALLOW_ARG(__NR_ioctl, 1, ICARSAMODEXPO),
        SC_ALLOW_ARG(__NR_ioctl, 1, ICARSACRT),
        SC_ALLOW_ARG(__NR_ioctl, 1, ZSECSENDCPRB),
+       /* Allow ioctls for EP11 crypto card on s390 */
+       SC_ALLOW_ARG(__NR_ioctl, 1, ZSENDEP11CPRB),
 #endif
 #if defined(__x86_64__) && defined(__ILP32__) && defined(__X32_SYSCALL_BIT)
        /*