From: Celeste Liu <CoelacanthusHex@gmail.com>
Date: Sun, 16 Oct 2022 02:47:17 +0000 (+0800)
Subject: seccomp: add riscv_flush_icache to allow list
X-Git-Tag: v252-rc2~31
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=09925036cf2b5a5c4cf680422a38c427ca692cd6;p=thirdparty%2Fsystemd.git

seccomp: add riscv_flush_icache to allow list

This system call is harmless because it only enforces ordering between stores
and instruction cache fetch.

fixed #24991
Related: https://github.com/felixonmars/archriscv-packages/issues/1840

Signed-off-by: Celeste Liu <CoelacanthusHex@gmail.com>
---

diff --git a/src/shared/seccomp-util.c b/src/shared/seccomp-util.c
index 1247da535d0..dfac4da7cc3 100644
--- a/src/shared/seccomp-util.c
+++ b/src/shared/seccomp-util.c
@@ -356,6 +356,7 @@ const SyscallFilterSet syscall_filter_sets[_SYSCALL_FILTER_SET_MAX] = {
                 "pause\0"
                 "prlimit64\0"
                 "restart_syscall\0"
+                "riscv_flush_icache\0"
                 "rseq\0"
                 "rt_sigreturn\0"
                 "sched_getaffinity\0"