Control: tags -1 + confirmed On Sun, 2018-09-09 at 00:15 +0200, Felix Geyer wrote: > libseccomp in stretch doesn't support some Linux 4.9 syscalls and > statx so whitelisting/blacklisting them is not possible. > > While statx is not supported in 4.9 it's still important to support > it in libseccomp as there is some software that calls statx() and > checks the error code for ENOSYS. Killing the process or returning > EACCES in response to statx by the seccomp filter breaks this of > course. >
Please go ahead; sorry for the delay. Regards, Adam
