diff options
-rw-r--r-- | bubblewrap.c | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/bubblewrap.c b/bubblewrap.c index be02004..8322ea0 100644 --- a/bubblewrap.c +++ b/bubblewrap.c @@ -288,7 +288,15 @@ seccomp_programs_apply (void) for (program = seccomp_programs; program != NULL; program = program->next) { if (prctl (PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &program->program) != 0) - die_with_error ("prctl(PR_SET_SECCOMP)"); + { + if (errno == EINVAL) + die ("Unable to set up system call filtering as requested: " + "prctl(PR_SET_SECCOMP) reported EINVAL. " + "(Hint: this requires a kernel configured with " + "CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER.)"); + + die_with_error ("prctl(PR_SET_SECCOMP)"); + } } } |