sys/linux: add ext4 ioctls and overlayfs

Update #533

1 files changed, 4 insertions, 0 deletions

diff --git a/pkg/host/host_linux.go b/pkg/host/host_linux.go
index 16be1d578..dd3e146c4 100644
--- a/pkg/host/host_linux.go
+++ b/pkg/host/host_linux.go
@@ -36,6 +36,10 @@ func isSupported(c *prog.Syscall, sandbox string) (bool, string) {
 	if strings.HasPrefix(c.Name, "mount$") {
 		return isSupportedMount(c, sandbox)
 	}
+	if c.Name == "ioctl$EXT4_IOC_SHUTDOWN" && sandbox == "none" {
+		// Don't shutdown root filesystem.
+		return false, "unsafe with sandbox=none"
+	}
 	// There are 3 possible strategies for detecting supported syscalls:
 	// 1. Executes all syscalls with presumably invalid arguments and check for ENOprog.
 	//    But not all syscalls are safe to execute. For example, pause will hang,