From 9b6cc75f1c53831543fa56e56650d1124c9bdbfe Mon Sep 17 00:00:00 2001
From: Christian Prochaska <christian.prochaska@genode-labs.com>
Date: Thu, 23 Jul 2020 16:50:43 +0200
Subject: [PATCH] tool/seccomp: allow 'restart_syscall' on x86_64

Fixes #3831
---
 .../seccomp/spec/x86_64/seccomp_bpf_policy.bin  | Bin 368 -> 376 bytes
 tool/seccomp/seccomp_bpf_compiler.h             |   3 +++
 2 files changed, 3 insertions(+)

diff --git a/repos/base-linux/src/lib/seccomp/spec/x86_64/seccomp_bpf_policy.bin b/repos/base-linux/src/lib/seccomp/spec/x86_64/seccomp_bpf_policy.bin
index d35e2475dec2e2a605a33fa371fb661ecd5637ea..f64c462564f7590131c73a98665dec1f10b2d669 100644
GIT binary patch
literal 376
zcmYk&!A`<J6ouiRNF^1tRTxB38K6K+jBGG*VF-`nn?T|Nxo72?J&B2X0z3q8=d=qa
zx%qm}+_atXK-tQ{%M^aRJ%{xMC1Ym!^U;=Lq}(yohGW2)C60_p_NmAovFuWno=e#w
zkxzK}NMAna&5ky&>hBrLJ0`Lf{>8p?%ZF_8DIH(3!BW;)$s5-4nm?Jcl?gj}#pXAh
zhw{7i-m0OTnxQ^bA779};a=i>kr#8}nE&R84&R5Bw=A==`EV`T_jz9mo?F3jp3C9{
D2aO+G

literal 368
zcmYk&%SyvQ6vpv?u&KmqlWL}3YIS<?0)@I!a3SKO_$Dp*K<>M8oqeHCAgvFP^vstm
z960=PzBxlO@j%PU!R#G=ygi5Y0+I1y`D10vaj)EQrwzxH14|qeVmanej!2}ZBX2p8
zH>7fim)CYOoFDKYub9hAp5z73@;rQt&GmVcj!&8MCC^yNQwrH*Ei<+<WhcA*Zo)li
zy;|?Ba^)Nw>NEAp5ov7iBl&CcW-eUs-yCuIT^8Q5sg=!#-=Te9_ffEI1=XUK<sR4f
B9zy^C

diff --git a/tool/seccomp/seccomp_bpf_compiler.h b/tool/seccomp/seccomp_bpf_compiler.h
index 514c8578a9..5d12b25401 100644
--- a/tool/seccomp/seccomp_bpf_compiler.h
+++ b/tool/seccomp/seccomp_bpf_compiler.h
@@ -167,6 +167,9 @@ class Filter
 
 						/* returning from signal handlers is safe */
 						_add_allow_rule(SCMP_SYS(rt_sigreturn));
+
+						/* restarting syscalls is safe (can occur when debugging with GDB) */
+						_add_allow_rule(SCMP_SYS(restart_syscall));
 					}
 					break;
 				case SCMP_ARCH_ARM: