Internal change.

PiperOrigin-RevId: 670667358
google · Sep 3, 2024 · 974e6da · 974e6da
1 parent 341a018
commit 974e6da
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/pkg/sentry/devices/tpuproxy/seccomp_filter.go b/pkg/sentry/devices/tpuproxy/seccomp_filter.go
@@ -104,6 +104,10 @@ func Filters() seccomp.SyscallRules {
 				seccomp.NonNegativeFD{},
 				seccomp.EqualTo(linux.VFIO_SET_IOMMU),
 			},
+			seccomp.PerArg{
+				seccomp.NonNegativeFD{},
+				seccomp.EqualTo(linux.VFIO_DEVICE_RESET),
+			},
 			seccomp.PerArg{
 				seccomp.NonNegativeFD{},
 				seccomp.EqualTo(gasket.GASKET_IOCTL_RESET),

diff --git a/pkg/sentry/fsimpl/sys/pci.go b/pkg/sentry/fsimpl/sys/pci.go
@@ -71,7 +71,9 @@ func sysDevicesPCIPaths(sysDevicesPath string) ([]string, error) {
 				return nil, err
 			}
 			for _, pciDent := range pciDents {
-				pciPaths = append(pciPaths, path.Join(sysDevicesPath, dent, pciDent))
+				if pciDeviceRegex.MatchString(pciDent) {
+					pciPaths = append(pciPaths, path.Join(sysDevicesPath, dent, pciDent))
+				}
 			}
 		}
 	}