Stanislav Levin 8f1dda6404 seccomp profile: Default to ENOSYS instead of EPERM ... This allows application to detect whether the kernel supports syscall or not. Previously, an error was unconditionally EPERM. There are many issues about glibc failed with new syscalls in containerized environments if their host run on old kernel. More about motivation for ENOSYS over EPERM: https://github.com/opencontainers/runc/issues/2151 https://github.com/opencontainers/runc/pull/2750 See about defaultErrnoRet introduction: https://github.com/opencontainers/runtime-spec/pull/1087 Previously, FreeIPA profile was vendored from https://github.com/containers/podman/blob/main/vendor/github.com/containers/common/pkg/seccomp/seccomp.json Now it is merged directly from https://github.com/containers/common/blob/main/pkg/seccomp/seccomp.json Fixes: https://pagure.io/freeipa/issue/9008 Signed-off-by: Stanislav Levin <slev@altlinux.org> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>		2021-10-18 12:08:56 +02:00
..
azure_definitions	Azure: temporarily disable problematic tests, #2	2021-07-23 10:52:55 +02:00
Dockerfiles	seccomp profile: Default to ENOSYS instead of EPERM	2021-10-18 12:08:56 +02:00
scripts	azure: Ignore tar errors	2021-09-15 08:48:13 +02:00
templates	azure: coredump: Wait for systemd fully booted	2021-05-25 10:45:49 +03:00
azure-pipelines-rawhide.yml	Azure: Add Rawhide definitions	2020-08-31 09:46:03 +03:00
azure-pipelines.yml	Azure: Run pycodestyle check in Lint job	2021-08-24 16:49:10 +02:00