Merge pull request #5354 from lifubang/backport-5347-to-release-1.5

[release-1.5 backport] seccomp: ignore unsupported wait-kill flag probe
This commit is contained in:
Rodrigo Campos Catelin
2026-06-30 15:31:49 +02:00
committed by GitHub
@@ -673,7 +673,7 @@ func filterFlags(config *configs.Seccomp, filter *libseccomp.ScmpFilter) (flags
}
}
if apiLevel >= 7 {
if waitKill, err := filter.GetWaitKill(); err != nil {
if waitKill, err := filter.GetWaitKill(); err != nil && !errors.Is(err, unix.EINVAL) {
return 0, false, fmt.Errorf("unable to fetch SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV bit: %w", err)
} else if waitKill {
flags |= uint(C.C_FILTER_FLAG_WAIT_KILLABLE_RECV)