seccomp: log aborted system calls

Suggested-by: Jann Horn <jann@thejh.net>
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

diff --git a/src/lxc/seccomp.c b/src/lxc/seccomp.c
index e303561bf96944c64736222cc7f5c743610c6a43..ba6811d9032bdfb98fa0493043e1c42931ac660d 100644 (file)
--- a/src/lxc/seccomp.c
+++ b/src/lxc/seccomp.c
@@ -1390,7 +1390,10 @@ int seccomp_notify_handler(int fd, uint32_t events, void *data,
        memset(req, 0, conf->seccomp.notifier.sizes.seccomp_notif);
        ret = seccomp_notify_receive(fd, req);
        if (ret) {
-               SYSERROR("Failed to read seccomp notification");
+               if (errno == ENOENT)
+                       TRACE("Intercepted system call aborted");
+               else
+                       SYSERROR("Failed to read seccomp notification");
                goto out;
        }