From f9cbc4803d338dd2745157d2041a5b44c3316320 Mon Sep 17 00:00:00 2001 From: Miroslav Lichvar Date: Thu, 6 May 2021 15:41:52 +0200 Subject: [PATCH] sys_linux: check if execveat is defined The syscall is missing on older systems. --- sys_linux.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/sys_linux.c b/sys_linux.c index 9f31710..50c0843 100644 --- a/sys_linux.c +++ b/sys_linux.c @@ -616,7 +616,9 @@ SYS_Linux_EnableSystemCallFilter(int level, SYS_ProcessContext context) const int denied_any[] = { SCMP_SYS(execve), +#ifdef __NR_execveat SCMP_SYS(execveat), +#endif SCMP_SYS(fork), SCMP_SYS(ptrace), SCMP_SYS(vfork),