diff --git a/exile.h b/exile.h index 30c24d5..4ab65f1 100644 --- a/exile.h +++ b/exile.h @@ -733,8 +733,8 @@ static int get_vow_argfilter(long syscall, uint64_t vow_promises, struct sock_fi struct sock_filter clone_filter[] = { /* It's the first argument for x86_64 */ EXILE_BPF_LOAD_SECCOMP_ARG(0), - EXILE_BPF_NO_MATCH_SET(CLONE_VM), - EXILE_BPF_NO_MATCH_SET(CLONE_THREAD), + EXILE_BPF_CMP_SET(CLONE_VM, 0, EXILE_SYSCALL_EXIT_BPF_NO_MATCH), + EXILE_BPF_CMP_SET(CLONE_THREAD, 0, EXILE_SYSCALL_EXIT_BPF_NO_MATCH), EXILE_BPF_NO_MATCH_SET(CLONE_NEWCGROUP), EXILE_BPF_NO_MATCH_SET(CLONE_NEWIPC), EXILE_BPF_NO_MATCH_SET(CLONE_NEWNET),