Browse Source

bug fix: syscalls send and recv not supported for x86_64 with libseccomp 1.0.1

Cristian Toader 10 years ago
parent
commit
d2836c8780
1 changed files with 9 additions and 2 deletions
  1. 9 2
      src/common/sandbox.c

+ 9 - 2
src/common/sandbox.c

@@ -129,12 +129,19 @@ static int filter_nopar_gen[] = {
     SCMP_SYS(bind),
     SCMP_SYS(connect),
     SCMP_SYS(getsockname),
-    SCMP_SYS(recv),
     SCMP_SYS(recvmsg),
     SCMP_SYS(recvfrom),
     SCMP_SYS(sendto),
-    SCMP_SYS(send),
     SCMP_SYS(unlink)
+
+    /*
+     * These syscalls are not required on x86_64 and not supported with
+     * some libseccomp versions (eg: 1.0.1)
+     */
+#if defined(__i386)
+    SCMP_SYS(recv),
+    SCMP_SYS(send),
+#endif
 };
 
 /**