Paul Kolano

Things look much better now. Everything builds properly without issue. I am still getting errors when building the default policy, however, even after changing the 5.3 to 3.10. Now, it...

I wasn't suggesting to ignore statements entirely, just to prune them of unsupported system calls. So for your example, your processor would vet each system call against what is supported...

ok, good to know, but doesn't fit my use case. I ended up just using libseccomp directly since I was having trouble loading any bpf file into the kernel whether...

ah, my apologies. I just noticed I was actually calling an old bison that was in my personal bin dir instead of the 3.0.4 system version.