seccomp: ignore unsupported wait-kill flag probe

Signed-off-by: Paco Xu <roollingstone@gmail.com>
(cherry picked from commit 4d84a3403b)
Signed-off-by: lifubang <lifubang@acmcoder.com>
This commit is contained in:
Paco Xu
2026-06-26 18:16:40 +08:00
committed by Rodrigo Campos Catelin
parent 2c96f6ef86
commit d667171ba8
@@ -673,7 +673,7 @@ func filterFlags(config *configs.Seccomp, filter *libseccomp.ScmpFilter) (flags
}
}
if apiLevel >= 7 {
if waitKill, err := filter.GetWaitKill(); err != nil {
if waitKill, err := filter.GetWaitKill(); err != nil && !errors.Is(err, unix.EINVAL) {
return 0, false, fmt.Errorf("unable to fetch SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV bit: %w", err)
} else if waitKill {
flags |= uint(C.C_FILTER_FLAG_WAIT_KILLABLE_RECV)