commit - 2debfe2b1fdef94dbbc9264d9528f7f021c0a324
commit + 298e4b96dc9ef528a058cc8a0d9561ca54588f03
blob - df2269daf92a6d942307569dca74c77616fd43cd
blob + 6b98d99b67e32dc4460c70831a676aa0dc69d063
--- sandbox.c
+++ sandbox.c
@@ -135,10 +135,15 @@ sandbox()
 
 		/* these are used to serve the files.  note how we
 		 * allow openat but not open. */
-#ifndef __aarch64__
+
+#ifdef __aarch64__
+		/* it seems that on aarch64 there isn't a poll(2)
+		 * syscall, but instead it's implemented on top of
+		 * ppoll(2). */
+		SC_ALLOW(ppoll),
+#else
 		SC_ALLOW(poll),
 #endif
-		SC_ALLOW(ppoll),
 		SC_ALLOW(accept),
 		SC_ALLOW(fcntl),
 		SC_ALLOW(read),