seccomp: ignore unsupported wait-kill flag probe

Signed-off-by: Paco Xu <roollingstone@gmail.com>
This commit is contained in:
Paco Xu
2026-06-26 18:16:40 +08:00
committed by lifubang
parent bc60126ec1
commit 4d84a3403b
@@ -673,7 +673,7 @@ func filterFlags(config *configs.Seccomp, filter *libseccomp.ScmpFilter) (flags
} }
} }
if apiLevel >= 7 { if apiLevel >= 7 {
if waitKill, err := filter.GetWaitKill(); err != nil { if waitKill, err := filter.GetWaitKill(); err != nil && !errors.Is(err, unix.EINVAL) {
return 0, false, fmt.Errorf("unable to fetch SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV bit: %w", err) return 0, false, fmt.Errorf("unable to fetch SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV bit: %w", err)
} else if waitKill { } else if waitKill {
flags |= uint(C.C_FILTER_FLAG_WAIT_KILLABLE_RECV) flags |= uint(C.C_FILTER_FLAG_WAIT_KILLABLE_RECV)