# cat /sys/devices/system/clocksource/clocksource0/current_clocksource hpet If system clcok source is hpet, then gettimeofday will do syscall gettimeofday, not for clocksource tsc. So we should add gettimeofday to seccomp too, otherwise: 2017-12-01T15:16:24 [INFO/event] libevent 2.1.8-stable initialized with epoll method 2017-12-01T15:16:24 [WARN/seccomp] invalid syscall attempted: gettimeofday(96) 2017-12-01T15:16:24 [CRIT/seccomp] invalid syscall not allowed: stop here Reproducible: Always
*** Bug 639364 has been marked as a duplicate of this bug. ***
https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=36798c06b52032a4697c00bff0849769c2ef9455