From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <pvorel@suse.cz>
Received: from mx2.suse.de (mx2.suse.de [195.135.220.15])
 by sourceware.org (Postfix) with ESMTPS id D7FE13861030
 for <libc-alpha@sourceware.org>; Fri, 26 Feb 2021 04:11:04 +0000 (GMT)
DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org D7FE13861030
Authentication-Results: sourceware.org;
 dmarc=none (p=none dis=none) header.from=suse.cz
Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=pvorel@suse.cz
X-Virus-Scanned: by amavisd-new at test-mx.suse.de
Received: from relay2.suse.de (unknown [195.135.221.27])
 by mx2.suse.de (Postfix) with ESMTP id E3907AAC5;
 Fri, 26 Feb 2021 04:11:03 +0000 (UTC)
Date: Fri, 26 Feb 2021 05:11:01 +0100
From: Petr Vorel <pvorel@suse.cz>
To: "Dmitry V. Levin" <ldv@altlinux.org>
Cc: libc-alpha@sourceware.org, Florian Weimer <fweimer@redhat.com>,
 Fabian Vogt <fvogt@suse.com>, Andreas Schwab <schwab@suse.de>,
 Kir Kolyshkin <kolyshkin@gmail.com>, Aleksa Sarai <cyphar@cyphar.com>,
 Ladislav Slezak <lslezak@suse.com>
Subject: Re: [RFC PATCH] Linux: Workaround seccomp() issue with faccessat2()
Message-ID: <YDh01daF81ZJY3+U@pevik>
Reply-To: Petr Vorel <pvorel@suse.cz>
References: <20210225194702.6113-1-pvorel@suse.cz>
 <20210225223817.GB20456@altlinux.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20210225223817.GB20456@altlinux.org>
X-Spam-Status: No, score=-4.3 required=5.0 tests=BAYES_00, KAM_DMARC_STATUS,
 RCVD_IN_MSPIKE_H3, RCVD_IN_MSPIKE_WL, SPF_HELO_NONE, SPF_PASS,
 TXREP autolearn=ham autolearn_force=no version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
 server2.sourceware.org
X-BeenThere: libc-alpha@sourceware.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Libc-alpha mailing list <libc-alpha.sourceware.org>
List-Unsubscribe: <https://sourceware.org/mailman/options/libc-alpha>,
 <mailto:libc-alpha-request@sourceware.org?subject=unsubscribe>
List-Archive: <https://sourceware.org/pipermail/libc-alpha/>
List-Post: <mailto:libc-alpha@sourceware.org>
List-Help: <mailto:libc-alpha-request@sourceware.org?subject=help>
List-Subscribe: <https://sourceware.org/mailman/listinfo/libc-alpha>,
 <mailto:libc-alpha-request@sourceware.org?subject=subscribe>
X-List-Received-Date: Fri, 26 Feb 2021 04:11:06 -0000

Hi Dmitry,

> Petr, you must have missed the whole discussion on this subject [1][2],
> the consensus was that problematic container runtimes need to be fixed
> to make their seccomp filters return ENOSYS for unknown syscalls.

Thanks for info and sorry for spam then.

Kind regards,
Petr

> [1] https://sourceware.org/pipermail/libc-alpha/2020-November/119955.html
> [2] https://lore.kernel.org/linux-api/87lfer2c0b.fsf@oldenburg2.str.redhat.com/T/#u