chore: update aws-lc-sys

New version of aws-lc-sys needs faccessat syscall on aarch64, so add it to the seccomp filter. Signed-off-by: Egor Lazarchuk <[email protected]>
firecracker-microvm · Jul 8, 2024 · b83640c · b83640c
1 parent 4100110
commit b83640c
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 5 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/resources/seccomp/aarch64-unknown-linux-musl.json b/resources/seccomp/aarch64-unknown-linux-musl.json
@@ -74,6 74,10 @@
  "syscall": "fstat",
  "comment": "Used for drive patching & rescanning, for reading the local timezone from /etc/localtime"
  },
  {
  "syscall": "faccessat",
  "comment": "Used by aws-lc-sys"
  },
  {
  "syscall": "ftruncate",
  "comment": "Used for snapshotting"

diff --git a/src/vmm/Cargo.toml b/src/vmm/Cargo.toml
@@ -11,7 11,7 @@ bench = false
 [dependencies]
 acpi_tables = { path = "../acpi-tables" } 
 aes-gcm = { version = "0.10.1", default-features = false, features = ["aes"] }
-aws-lc-rs = { version = "1.7.3", features = ["bindgen"] }
 aws-lc-rs = { version = "1.8.0", features = ["bindgen"] }
 base64 = "0.22.1"
 bincode = "1.2.1"
 bitflags = "2.6.0"