jail: relax seccomp unknown syscall handling

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

diff --git a/jail/seccomp-oci.c b/jail/seccomp-oci.c
index 06fa2d15982df215457d00804a04ce532875ee2a..bc9a49123990c17d75f75ad4ac518b0b9faea66a 100644 (file)
--- a/jail/seccomp-oci.c
+++ b/jail/seccomp-oci.c
@@ -221,7 +221,8 @@ struct sock_fprog *parseOCIlinuxseccomp(struct blob_attr *msg)
                        sc = find_syscall(blobmsg_get_string(curn));
                        if (sc == -1) {
                                ERROR("unknown syscall '%s'\n", blobmsg_get_string(curn));
-                               goto errout1;
+                               /* TODO: support run.oci.seccomp_fail_unknown_syscall=1 annotation */
+                               continue;
                        }
 
                        /* add rule to filter */