(In reply to Takashi Iwai from comment #5) > SECCOMP_FILTER is available only when CONFIG_OABI_COMPAT=n. It's explicitly > limited via commit 9170217510cd280c704966738e7c1660c8fa5cbd > ARM: 7888/1: seccomp: not compatible with ARM OABI > > And kernel-lpae defines this, so CONFIG_SECCOMP_FILTER isn't available there. Sounds like that should be changed. For default it was part of your commit: Update config files: disable CONFIG_OABI_COMPAT for 32bit Arm (bsc#1165462) That didn't touch lpae though, it's out of sync. I don't think much of the diff between default and lpae is intentional, maybe it should be rebased on default again.