commit 4c857c0afcb7d76cb03323ba7d0dfef60b27589f
from: Omar Polo <op@omarpolo.com>
date: Wed Feb 10 18:02:08 2021 UTC

[seccomp] epoll_wait(2) isn't available on every arch

commit - aa37287565c6eb7ac3da814b334ab61a5b567a22
commit + 4c857c0afcb7d76cb03323ba7d0dfef60b27589f
blob - 6916c61e198e10b1aebe954b94cc72b425ced821
blob + d71ac08818023c1f1c05eae45f6367337d19b6b6
--- sandbox.c
+++ sandbox.c
@@ -150,7 +150,10 @@ sandbox()
 
 		/* these are used to serve the files.  note how we
 		 * allow openat but not open. */
+#ifdef __NR_epoll_wait
+		/* epoll_wait(2) isn't present on aarch64, at least */
 		SC_ALLOW(epoll_wait),
+#endif
 		SC_ALLOW(epoll_pwait),
 		SC_ALLOW(epoll_ctl),
 		SC_ALLOW(accept4),