unable to build in Centos

[doomedramen]

I have been unable to build on any machines running CentOS Linux.

NOTE: I ran export C_INCLUDE_PATH=/usr/src/kernels/3.4.68-9.el6.centos.alt.x86_64/include to include linux/seccomp.h

---

cc -DHAVE_CONFIG_H -I. -I./linux/x86_64 -I./linux -I./linux -lcrypto -Wall -Wwrite-strings -g -O2 -MT mbox.o -MD -MP -MF .deps/mbox.Tpo -c -o mbox.o mbox.c In file included from /usr/include/asm/ptrace-abi.h:84, from /usr/include/asm/ptrace.h:5, from defs.h:166, from mbox.c:31: /usr/src/kernels/3.4.68-9.el6.centos.alt.x86_64/include/linux/types.h:13:2: warning: #warning "Attempt to use kernel headers from user space, see http://kernelnewbies.org/KernelHeaders" In file included from mbox.c:50: bpf-syscall.h:4: error: invalid use of undefined type ‘struct seccomp_data’ bpf-syscall.h:5: error: ‘SECCOMP_RET_TRACE’ undeclared here (not in a function) bpf-syscall.h:66: error: ‘SECCOMP_RET_ALLOW’ undeclared here (not in a function) mbox.c: In function ‘install_seccomp’: mbox.c:289: error: ‘PR_SET_NO_NEW_PRIVS’ undeclared (first use in this function) mbox.c:289: error: (Each undeclared identifier is reported only once mbox.c:289: error: for each function it appears in.) mbox.c:289: warning: passing argument 1 of ‘prctl’ makes integer from pointer without a cast /usr/include/sys/prctl.h:28: note: expected ‘int’ but argument is of type ‘struct sockfilter ’ mbox.c:292: error: ‘SECCOMP_MODEFILTER’ undeclared (first use in this function) make[1]: ** [mbox.o] Error 1 make[1]: Leaving directory `/opt/mbox/src' make: *\ [all] Error 2

[tsgates]

Could you check if current centos supports SECCOMP?

CONFIG_HAVE_ARCH_SECCOMP_FILTER=y CONFIG_SECCOMP_FILTER=y CONFIG_SECCOMP=y

In fact, you shouldn't be problem if you disable seccomp, which is just perf optimization.

[doomedramen]

It appears SECCOMP is not supported by the current CENTOS RHEL Kernel. I am not a C dev, do you know how to disable this optimisation ?

Thanks

[nleng]

I have a similar issue on debian 7. First, the seccomp.h was not found because it was not in /include/linux/ but in /include/. But this seccomp.h looks completely different to the one on my other ubuntu system, where the installations worked. E.g. it has no "struct seccomp_data". So I corrected the path and copied all missing definitions to the debian seccomp.h. Then the build seemed to be working, but when I try to use it:

mbox: PTRACE_SETOPTIONS: Invalid argument or with -s option: mbox: prctl(NO_NEW_PRIVS): Invalid argument

Any ideas? Thanks!

[nleng]

After upgrading to Debian 8.0 it is working. I really like how uncomplicated the usage is (when it works :P).

[tsgates]

thanks. I was planing to check this thread next week. I don't have then :)