tentative fix for issue #1948

1 files changed, 5 insertions, 0 deletions

diff --git a/src/fseccomp/seccomp.c b/src/fseccomp/seccomp.c
index 777c38c43..0ecf708ce 100644
--- a/src/fseccomp/seccomp.c
+++ b/src/fseccomp/seccomp.c
@@ -242,6 +242,10 @@ void memory_deny_write_execute(const char *fname) {
 
                 // same for pkey_mprotect(,,PROT_EXEC), where available
 #ifdef SYS_pkey_mprotect
+#ifdef __NR_pkey_mprotect
+// RasPi 2 (kernel 4.14.37) seems to have SYS_pkey_mprotect #defined as __NR_pkey_mprotect
+// but no __NR_pkey_mprotect defined?
+// issue #1948
                 BPF_JUMP(BPF_JMP+BPF_JEQ+BPF_K, SYS_pkey_mprotect, 0, 5),
                 EXAMINE_ARGUMENT(2),
                 BPF_STMT(BPF_ALU+BPF_AND+BPF_K, PROT_EXEC),
@@ -249,6 +253,7 @@ void memory_deny_write_execute(const char *fname) {
                 KILL_PROCESS,
                 RETURN_ALLOW,
 #endif
+#endif
 
 // shmat is not implemented as a syscall on some platforms (i386, powerpc64, powerpc64le)
 #ifdef SYS_shmat