diff -Naur mpm-itk-2.4.4-03.orig/seccomp.c mpm-itk-2.4.4-03/seccomp.c --- mpm-itk-2.4.4-03.orig/seccomp.c 2012-11-08 21:01:42.000000000 +0100 +++ mpm-itk-2.4.4-03/seccomp.c 2013-02-27 14:55:26.780130932 +0100 @@ -146,20 +146,22 @@ if (apply_seccomp_filter(arch_filter, sizeof(arch_filter) / sizeof(arch_filter[0])) != 0) { return; } +#ifdef __i386 limit_syscall_range(__NR_setfsuid32, 1, min_uid, max_uid); limit_syscall_range(__NR_setuid32, 1, min_uid, max_uid); limit_syscall_range(__NR_setreuid32, 2, min_uid, max_uid); limit_syscall_range(__NR_setresuid32, 3, min_uid, max_uid); - limit_syscall_range(__NR_setfsuid, 1, min_uid16, max_uid16); - limit_syscall_range(__NR_setuid, 1, min_uid16, max_uid16); - limit_syscall_range(__NR_setreuid, 2, min_uid16, max_uid16); - limit_syscall_range(__NR_setresuid, 3, min_uid16, max_uid16); - limit_syscall_range(__NR_setfsgid32, 1, min_gid, max_gid); limit_syscall_range(__NR_setgid32, 1, min_gid, max_gid); limit_syscall_range(__NR_setregid32, 2, min_gid, max_gid); limit_syscall_range(__NR_setresgid32, 3, min_gid, max_gid); +#endif + + limit_syscall_range(__NR_setfsuid, 1, min_uid16, max_uid16); + limit_syscall_range(__NR_setuid, 1, min_uid16, max_uid16); + limit_syscall_range(__NR_setreuid, 2, min_uid16, max_uid16); + limit_syscall_range(__NR_setresuid, 3, min_uid16, max_uid16); limit_syscall_range(__NR_setfsgid, 1, min_gid16, max_gid16); limit_syscall_range(__NR_setgid, 1, min_gid16, max_gid16);