as i said on irc, this code ATM doesn't compile: flag@flag-desktop:~/seccomp/tests$ lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 12.04.3 LTS Release: 12.04 Codename: precise flag@flag-desktop:~/seccomp/tests$ uname -a Linux flag-desktop 3.2.0-1441-omap4 #60 SMP PREEMPT Fri Nov 15 15:16:44 UTC 2013 armv7l armv7l armv7l GNU/Linux /usr/include/arm-linux-gnueabi/asm/unistd.h: ... #if defined(__ARM_EABI__) && !defined(__KERNEL__) #warning im here #undef __NR_time #undef __NR_umount #undef __NR_stime #undef __NR_alarm #undef __NR_utime #undef __NR_getrlimit #undef __NR_select #undef __NR_readdir #undef __NR_mmap #undef __NR_socketcall #undef __NR_syscall #undef __NR_ipc #endif the #warning is mine: flag@flag-desktop:~/seccomp/tests$ gcc -dM -E seccomp_bpf_tests.c | grep EABI #define __ARM_EABI__ 1 flag@flag-desktop:~/seccomp/tests$ make cc seccomp_bpf_tests.c -o seccomp_bpf_tests In file included from /usr/include/arm-linux-gnueabi/sys/syscall.h:25:0, from /usr/include/syscall.h:1, from seccomp_bpf_tests.c:22: /usr/include/arm-linux-gnueabi/asm/unistd.h:428:2: warning: #warning im here [-Wcpp] seccomp_bpf_tests.c: In function ‘ERRNO_one’: seccomp_bpf_tests.c:310:3: error: ‘__NR_time’ undeclared (first use in this function) seccomp_bpf_tests.c:310:3: note: each undeclared identifier is reported only once for each function it appears in seccomp_bpf_tests.c:326:2: warning: passing argument 1 of ‘syscall’ makes integer from pointer without a cast [enabled by default] /usr/include/unistd.h:1082:17: note: expected ‘long int’ but argument is of type ‘struct sock_filter *’ seccomp_bpf_tests.c:326:2: warning: passing argument 1 of ‘syscall’ makes integer from pointer without a cast [enabled by default] /usr/include/unistd.h:1082:17: note: expected ‘long int’ but argument is of type ‘struct sock_filter *’ seccomp_bpf_tests.c: In function ‘ERRNO_one_ok’: seccomp_bpf_tests.c:339:3: error: ‘__NR_time’ undeclared (first use in this function) seccomp_bpf_tests.c:339:3: warning: initialization makes integer from pointer without a cast [enabled by default] seccomp_bpf_tests.c:339:3: warning: (near initialization for ‘filter[1].k’) [enabled by default] seccomp_bpf_tests.c:358:3: warning: passing argument 1 of ‘syscall’ makes integer from pointer without a cast [enabled by default] /usr/include/unistd.h:1082:17: note: expected ‘long int’ but argument is of type ‘struct sock_filter *’ seccomp_bpf_tests.c:358:3: warning: passing argument 1 of ‘syscall’ makes integer from pointer without a cast [enabled by default] /usr/include/unistd.h:1082:17: note: expected ‘long int’ but argument is of type ‘struct sock_filter *’ seccomp_bpf_tests.c: In function ‘TRAP_setup’: seccomp_bpf_tests.c:375:3: error: ‘__NR_time’ undeclared (first use in this function) seccomp_bpf_tests.c:375:3: warning: initialization makes integer from pointer without a cast [enabled by default] seccomp_bpf_tests.c:375:3: warning: (near initialization for ‘filter[3].k’) [enabled by default] seccomp_bpf_tests.c: In function ‘TRAP_dfl’: seccomp_bpf_tests.c:398:10: error: ‘__NR_time’ undeclared (first use in this function) seccomp_bpf_tests.c:398:2: warning: passing argument 1 of ‘syscall’ makes integer from pointer without a cast [enabled by default] /usr/include/unistd.h:1082:17: note: expected ‘long int’ but argument is of type ‘struct sock_filter *’ seccomp_bpf_tests.c: In function ‘tracer’: seccomp_bpf_tests.c:696:27: error: storage size of ‘regs’ isn’t known seccomp_bpf_tests.c:718:11: error: request for member ‘orig_rax’ in something not a structure or union seccomp_bpf_tests.c:718:24: error: ‘__NR_time’ undeclared (first use in this function) seccomp_bpf_tests.c:719:8: error: request for member ‘rax’ in something not a structure or union seccomp_bpf_tests.c:720:8: error: request for member ‘orig_rax’ in something not a structure or union seccomp_bpf_tests.c:724:1: error: request for member ‘rip’ in something not a structure or union seccomp_bpf_tests.c:724:3: warning: format ‘%lx’ expects argument of type ‘long unsigned int’, but argument 6 has type ‘struct sock_filter *’ [-Wformat] seccomp_bpf_tests.c: In function ‘TRACE_setup’: seccomp_bpf_tests.c:743:3: error: ‘__NR_time’ undeclared (first use in this function) seccomp_bpf_tests.c:743:3: warning: initialization makes integer from pointer without a cast [enabled by default] seccomp_bpf_tests.c:743:3: warning: (near initialization for ‘filter[1].k’) [enabled by default] seccomp_bpf_tests.c: In function ‘TRACE_time_is_skipped’: seccomp_bpf_tests.c:794:15: error: ‘__NR_time’ undeclared (first use in this function) seccomp_bpf_tests.c:794:3: warning: passing argument 1 of ‘syscall’ makes integer from pointer without a cast [enabled by default] /usr/include/unistd.h:1082:17: note: expected ‘long int’ but argument is of type ‘struct sock_filter *’ make: *** [seccomp_bpf_tests] Error 1 x kees: can yo do the same on the box where you said you compiled this test?