From 637402a827af50bf0ed6e2f72f5cfe749c41f1c5 Mon Sep 17 00:00:00 2001
From: Peter Collingbourne <pcc@google.com>
Date: Mon, 6 Jun 2022 10:29:35 -0700
Subject: [PATCH] Add rseq to the seccomp policy file on aarch64.

Some newer versions of glibc use this syscall.

Change-Id: I553db954b019fa5fc738074b28dbba78392c3ede
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3690467
Tested-by: kokoro <noreply+kokoro@google.com>
Auto-Submit: Peter Collingbourne <pcc@chromium.org>
Commit-Queue: Daniel Verkamp <dverkamp@chromium.org>
Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>
---
 seccomp/aarch64/common_device.policy | 1 +
 1 file changed, 1 insertion(+)

diff --git a/seccomp/aarch64/common_device.policy b/seccomp/aarch64/common_device.policy
index ba11bac0d6..c8a1088488 100644
--- a/seccomp/aarch64/common_device.policy
+++ b/seccomp/aarch64/common_device.policy
@@ -37,6 +37,7 @@ readv: 1
 recvfrom: 1
 recvmsg: 1
 restart_syscall: 1
+rseq: 1
 rt_sigaction: 1
 rt_sigprocmask: 1
 rt_sigreturn: 1