Merge pull request #5347 from pacoxu/patch-1

seccomp: ignore unsupported wait-kill flag probe
This commit is contained in:
Rodrigo Campos Catelin
2026-06-29 15:06:30 +02:00
committed by GitHub
@@ -673,7 +673,7 @@ func filterFlags(config *configs.Seccomp, filter *libseccomp.ScmpFilter) (flags
} }
} }
if apiLevel >= 7 { if apiLevel >= 7 {
if waitKill, err := filter.GetWaitKill(); err != nil { if waitKill, err := filter.GetWaitKill(); err != nil && !errors.Is(err, unix.EINVAL) {
return 0, false, fmt.Errorf("unable to fetch SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV bit: %w", err) return 0, false, fmt.Errorf("unable to fetch SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV bit: %w", err)
} else if waitKill { } else if waitKill {
flags |= uint(C.C_FILTER_FLAG_WAIT_KILLABLE_RECV) flags |= uint(C.C_FILTER_FLAG_WAIT_KILLABLE_RECV)