get_mempolicy syscall was temporarily removed from the default seccomp list. It seems to break

playing youtube videos on Firefox Nightly - #1414

1 files changed, 7 insertions, 3 deletions

diff --git a/src/fseccomp/seccomp.c b/src/fseccomp/seccomp.c
index 7d2ccbbce..a30a9e00b 100644
--- a/src/fseccomp/seccomp.c
+++ b/src/fseccomp/seccomp.c
@@ -162,9 +162,13 @@ static void add_default_list(int fd, int allow_debuggers) {
 #ifdef SYS_mbind
         filter_add_blacklist(fd, SYS_mbind, 0);
 #endif
-#ifdef SYS_get_mempolicy
-        filter_add_blacklist(fd, SYS_get_mempolicy, 0);
-#endif
+
+// breaking Firefox nightly when playing youtube videos
+// TODO: test again when firefox sandbox is finally released
+//#ifdef SYS_get_mempolicy
+//      filter_add_blacklist(fd, SYS_get_mempolicy, 0);
+//#endif
+
 #ifdef SYS_set_mempolicy
         filter_add_blacklist(fd, SYS_set_mempolicy, 0);
 #endif