commit d2836c8780373eff011ba42620d5ab48f342cf78 Author: Cristian Toader cristian.matei.toader@gmail.com Date: Thu Sep 12 15:30:28 2013 +0300

bug fix: syscalls send and recv not supported for x86_64 with libseccomp 1.0.1 --- src/common/sandbox.c | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/src/common/sandbox.c b/src/common/sandbox.c index dc8885e..db2ad1d 100644 --- a/src/common/sandbox.c +++ b/src/common/sandbox.c @@ -129,12 +129,19 @@ static int filter_nopar_gen[] = { SCMP_SYS(bind), SCMP_SYS(connect), SCMP_SYS(getsockname), - SCMP_SYS(recv), SCMP_SYS(recvmsg), SCMP_SYS(recvfrom), SCMP_SYS(sendto), - SCMP_SYS(send), SCMP_SYS(unlink) + + /* + * These syscalls are not required on x86_64 and not supported with + * some libseccomp versions (eg: 1.0.1) + */ +#if defined(__i386) + SCMP_SYS(recv), + SCMP_SYS(send), +#endif };

/**