Merge pull request #205 from endocode/iaguis/seccomp-v2

nspawn: make seccomp loading errors non-fatal
This commit is contained in:
Lennart Poettering
2015-06-15 11:45:48 +02:00

View File

@@ -3002,8 +3002,15 @@ static int setup_seccomp(void) {
}
r = seccomp_load(seccomp);
if (r < 0)
if (r == -EINVAL) {
log_debug_errno(r, "Kernel is probably not configured with CONFIG_SECCOMP. Disabling seccomp audit filter: %m");
r = 0;
goto finish;
}
if (r < 0) {
log_error_errno(r, "Failed to install seccomp audit filter: %m");
goto finish;
}
finish:
seccomp_release(seccomp);