Bad system call

Gary E. Miller gem at rellim.com
Tue Jan 19 00:19:23 UTC 2021


Yo Hal!

On Mon, 18 Jan 2021 16:02:53 -0800
Hal Murray <hmurray at megapathdsl.net> wrote:

> > How do I know I have seccomp running?  I have always avoided it.  
> 
> Scan your config.h for SECCOMP
> details in wscript  -- search for seccomp

Yup, there it is.  I forgot it was on this host.

> > How do I disable it?   
> 
> Stop configuring with --enable-seccomp

Yup, that worked.

> > Looks like I had built NTPsec with --enable-seccomp a while back.
> > glibc updated, and broke ntpd.   
> 
> Somebody should add clock_gettime64 to the seccomp list.
> Looks like it needs the ifdef stuff.

I prefer to just run away.  "seccomp" and "AppArmor" are just "Security
Theater".

But I agree someone that cares should fix it.

Thanks to you and James for you help.

RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97703
	gem at rellim.com  Tel:+1 541 382 8588

	    Veritas liberabit vos. -- Quid est veritas?
    "If you can't measure it, you can't improve it." - Lord Kelvin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 851 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ntpsec.org/pipermail/devel/attachments/20210118/36956e9d/attachment.bin>


More information about the devel mailing list