From ab18e5e5fcff7fbdbf0905e6dd2585b7e4a10108 Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Wed, 6 Sep 2017 14:23:47 -0400 Subject: Better error on failure to load seccomp2 sandbox There are two reasons this is likeliest to happen -- no kernel support, and some bug in Tor. We'll ask people to check the former before they report. Closes 23090. --- src/common/sandbox.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'src/common/sandbox.c') diff --git a/src/common/sandbox.c b/src/common/sandbox.c index 18beaabe14..a85b1406fa 100644 --- a/src/common/sandbox.c +++ b/src/common/sandbox.c @@ -1638,7 +1638,9 @@ install_syscall_filter(sandbox_cfg_t* cfg) // loading the seccomp2 filter if ((rc = seccomp_load(ctx))) { - log_err(LD_BUG, "(Sandbox) failed to load: %d (%s)!", rc, + log_err(LD_BUG, "(Sandbox) failed to load: %d (%s)! " + "Are you sure that your kernel has seccomp2 support? The " + "sandbox won't work without it.", rc, strerror(-rc)); goto end; } -- cgit v1.2.3-54-g00ecf