seccomp: log aborted system calls

Suggested-by: Jann Horn <jann@thejh.net> Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

seccomp: log aborted system calls
0d724ab4 · Christian Brauner · a60c98aa · 0d724ab4
Unverified Commit 0d724ab4 authored Nov 02, 2020 by Christian Brauner
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 1 deletion

seccomp.c src/lxc/seccomp.c +4 -1

No files found.
--- a/src/lxc/seccomp.c
+++ b/src/lxc/seccomp.c
@@ -1390,7 +1390,10 @@ int seccomp_notify_handler(int fd, uint32_t events, void *data,
 	memset(req, 0, conf->seccomp.notifier.sizes.seccomp_notif);
 	ret = seccomp_notify_receive(fd, req);
 	if (ret) {
-		SYSERROR("Failed to read seccomp notification");
+		if (errno == ENOENT)
+			TRACE("Intercepted system call aborted");
+		else
+			SYSERROR("Failed to read seccomp notification");
 		goto out;
 	}