* Florian Weimer (fwei...@redhat.com) wrote: > * David Alan Gilbert: > > > +static const int syscall_whitelist[] = { > > + /* TODO ireg sem*() syscalls */ > > + SCMP_SYS(brk), > > + SCMP_SYS(capget), /* For CAP_FSETID */ > > + SCMP_SYS(capset), > > + SCMP_SYS(clock_gettime), > > > + SCMP_SYS(gettimeofday), > > Is this to suppose to work on 32-bit architectures? Then you need to > add the time64 system call variants as well.
Trying SCMP_SYS(time64) gives me an error for an undefined __NR_time64 on both 64 and 32 bit. Dave > Thanks, > Florian -- Dr. David Alan Gilbert / dgilb...@redhat.com / Manchester, UK