seccomp: send default response when there's no proxy

Particularly, when there's no proxy registered (iow. none
configured but the seccomp profile still had a 'notify'
rule), we don't want to leave them hanging.

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

diff --git a/src/lxc/seccomp.c b/src/lxc/seccomp.c
index 7e2b407ab2aef771978bfc1866be4a3b18bd69b6..12e6dbe7825ffc6b7f11729b09957ac399202a00 100644 (file)
--- a/src/lxc/seccomp.c
+++ b/src/lxc/seccomp.c
@@ -1375,7 +1375,7 @@ int seccomp_notify_handler(int fd, uint32_t events, void *data,
 
        if (listener_proxy_fd < 0) {
                ERROR("No seccomp proxy registered");
-               return minus_one_set_errno(EINVAL);
+               return seccomp_notify_default_answer(fd, req, resp, hdlr);
        }
 
        /* remember the ID in case we receive garbage from the proxy */