chore: update aws-lc-sys

New version of aws-lc-sys needs faccessat syscall on aarch64, so add it to the seccomp filter. Signed-off-by: Egor Lazarchuk <[email protected]>
firecracker-microvm · Jul 8, 2024 · b83640c · b83640c
1 parent 4100110
commit b83640c
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 5 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/resources/seccomp/aarch64-unknown-linux-musl.json b/resources/seccomp/aarch64-unknown-linux-musl.json
@@ -74,6 +74,10 @@
                 "syscall": "fstat",
                 "comment": "Used for drive patching & rescanning, for reading the local timezone from /etc/localtime"
             },
+            {
+                "syscall": "faccessat",
+                "comment": "Used by aws-lc-sys"
+            },
             {
                 "syscall": "ftruncate",
                 "comment": "Used for snapshotting"

diff --git a/src/vmm/Cargo.toml b/src/vmm/Cargo.toml
@@ -11,7 +11,7 @@ bench = false
 [dependencies]
 acpi_tables = { path = "../acpi-tables" } 
 aes-gcm =  { version = "0.10.1", default-features = false, features = ["aes"] }
-aws-lc-rs = { version = "1.7.3", features = ["bindgen"] }
+aws-lc-rs = { version = "1.8.0", features = ["bindgen"] }
 base64 = "0.22.1"
 bincode = "1.2.1"
 bitflags = "2.6.0"