Fix seccomp futex filters

Rust mpsc channels make use of the futex system call. They used to make
use of the FUTEX_WAIT_PRIVATE flag, but now they substituted it with
FUTEX_WAIT_BITSET_PRIVATE which was breaking our seccomp filter list.

Update the filters.

Signed-off-by: Babis Chalios <[email protected]>

Author: bchalios

resources/seccomp/aarch64-unknown-linux-musl.json

@@ -170,6 +170,19 @@
                     }
                 ]
             },
+            {
+                "syscall": "futex",
+                "comment": "Used for synchronization",
+                "args": [
+                    {
+                        "index": 1,
+                        "type": "dword",
+                        "op": "eq",
+                        "val": 137,
+                        "comment": "FUTEX_WAIT_BITSET_PRIVATE"
+                    }
+                ]
+            },
             {
                 "syscall": "futex",
                 "comment": "Used for synchronization",
@@ -544,6 +557,19 @@
                     }
                 ]
             },
+            {
+                "syscall": "futex",
+                "comment": "Used for synchronization",
+                "args": [
+                    {
+                        "index": 1,
+                        "type": "dword",
+                        "op": "eq",
+                        "val": 137,
+                        "comment": "FUTEX_WAIT_BITSET_PRIVATE"
+                    }
+                ]
+            },
             {
                 "syscall": "futex",
                 "comment": "Used for synchronization",
@@ -753,6 +779,19 @@
                     }
                 ]
             },
+            {
+                "syscall": "futex",
+                "comment": "Used for synchronization",
+                "args": [
+                    {
+                        "index": 1,
+                        "type": "dword",
+                        "op": "eq",
+                        "val": 137,
+                        "comment": "FUTEX_WAIT_BITSET_PRIVATE"
+                    }
+                ]
+            },
             {
                 "syscall": "futex",
                 "comment": "Used for synchronization",

resources/seccomp/x86_64-unknown-linux-musl.json

@@ -170,6 +170,19 @@
                     }
                 ]
             },
+            {
+                "syscall": "futex",
+                "comment": "Used for synchronization",
+                "args": [
+                    {
+                        "index": 1,
+                        "type": "dword",
+                        "op": "eq",
+                        "val": 137,
+                        "comment": "FUTEX_WAIT_BITSET_PRIVATE"
+                    }
+                ]
+            },
             {
                 "syscall": "futex",
                 "comment": "Used for synchronization",
@@ -556,6 +569,19 @@
                     }
                 ]
             },
+            {
+                "syscall": "futex",
+                "comment": "Used for synchronization",
+                "args": [
+                    {
+                        "index": 1,
+                        "type": "dword",
+                        "op": "eq",
+                        "val": 137,
+                        "comment": "FUTEX_WAIT_BITSET_PRIVATE"
+                    }
+                ]
+            },
             {
                 "syscall": "futex",
                 "comment": "Used for synchronization",
@@ -765,6 +791,19 @@
                     }
                 ]
             },
+            {
+                "syscall": "futex",
+                "comment": "Used for synchronization",
+                "args": [
+                    {
+                        "index": 1,
+                        "type": "dword",
+                        "op": "eq",
+                        "val": 137,
+                        "comment": "FUTEX_WAIT_BITSET_PRIVATE"
+                    }
+                ]
+            },
             {
                 "syscall": "futex",
                 "comment": "Used for synchronization",