From d2836c8780373eff011ba42620d5ab48f342cf78 Mon Sep 17 00:00:00 2001
From: Cristian Toader <cristian.matei.toader@gmail.com>
Date: Thu, 12 Sep 2013 15:30:28 +0300
Subject: bug fix: syscalls send and recv not supported for x86_64 with
 libseccomp 1.0.1

---
 src/common/sandbox.c | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

(limited to 'src')

diff --git a/src/common/sandbox.c b/src/common/sandbox.c
index dc8885e18..db2ad1d6f 100644
--- a/src/common/sandbox.c
+++ b/src/common/sandbox.c
@@ -129,12 +129,19 @@ static int filter_nopar_gen[] = {
     SCMP_SYS(bind),
     SCMP_SYS(connect),
     SCMP_SYS(getsockname),
-    SCMP_SYS(recv),
     SCMP_SYS(recvmsg),
     SCMP_SYS(recvfrom),
     SCMP_SYS(sendto),
-    SCMP_SYS(send),
     SCMP_SYS(unlink)
+
+    /*
+     * These syscalls are not required on x86_64 and not supported with
+     * some libseccomp versions (eg: 1.0.1)
+     */
+#if defined(__i386)
+    SCMP_SYS(recv),
+    SCMP_SYS(send),
+#endif
 };
 
 /**
-- 
cgit v1.2.3