summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--bubblewrap.c10
1 files changed, 9 insertions, 1 deletions
diff --git a/bubblewrap.c b/bubblewrap.c
index be02004..8322ea0 100644
--- a/bubblewrap.c
+++ b/bubblewrap.c
@@ -288,7 +288,15 @@ seccomp_programs_apply (void)
for (program = seccomp_programs; program != NULL; program = program->next)
{
if (prctl (PR_SET_SECCOMP, SECCOMP_MODE_FILTER, &program->program) != 0)
- die_with_error ("prctl(PR_SET_SECCOMP)");
+ {
+ if (errno == EINVAL)
+ die ("Unable to set up system call filtering as requested: "
+ "prctl(PR_SET_SECCOMP) reported EINVAL. "
+ "(Hint: this requires a kernel configured with "
+ "CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER.)");
+
+ die_with_error ("prctl(PR_SET_SECCOMP)");
+ }
}
}