- (djm) [sandbox-seccomp-filter.c] Not all Linux architectures define

    __NR_shutdown; some go via the socketcall(2) multiplexer.

1 files changed, 2 insertions, 0 deletions

diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
index dbda60bab..c0c17c2fc 100644
--- a/sandbox-seccomp-filter.c
+++ b/sandbox-seccomp-filter.c
@@ -98,7 +98,9 @@ static const struct sock_filter preauth_insns[] = {
         SC_ALLOW(read),
         SC_ALLOW(write),
         SC_ALLOW(close),
+#ifdef __NR_shutdown /* not defined on archs that go via socketcall(2) */
         SC_ALLOW(shutdown),
+#endif
         SC_ALLOW(brk),
         SC_ALLOW(poll),
 #ifdef __NR__newselect