arch: enable less strict filter rewrites

At present we fail if we can't completely preserve the caller's
filter, while admirable, this does require some knowledge of the
architecture to ensure you're adding a "correct" rule.

In keeping with our goal of architecture independence, we want to
add the ability to do "best effort" rewrites that preserve as much
of the original filter rule as possible.

Signed-off-by: Paul Moore <pmoore@redhat.com>

1 files changed, 1 insertions, 1 deletions

diff --git a/src/api.c b/src/api.c
index 78dd45e..8c43546 100644
--- a/src/api.c
+++ b/src/api.c
@@ -190,7 +190,7 @@ int seccomp_rule_add(uint32_t action, int syscall, unsigned int arg_cnt, ...)
 	/* if this is a pseudo syscall (syscall < 0) then we need to rewrite
 	 * the rule for some arch specific reason */
 	if (syscall < 0) {
-		rc = arch_filter_rewrite(filter->arch, &syscall, chain);
+		rc = arch_filter_rewrite(filter->arch, 1, &syscall, chain);
 		if (rc < 0)
 			goto rule_add_return;
 	}