nspawn: allow 32-bit chroots from 64-bit hosts

Arch Linux uses nspawn as a container for building packages and needs
to be able to start a 32bit chroot from a 64bit host. 24fb111207
disrupted this feature when seccomp handling was added.
This commit is contained in:
Dave Reisner
2014-02-18 21:26:24 +01:00
committed by Lennart Poettering
parent 4b462d1a28
commit f3d5485b80
+8
View File
@@ -1539,6 +1539,14 @@ static int audit_still_doesnt_work_in_containers(void) {
goto finish;
}
#ifdef __x86_64__
r = seccomp_arch_add(seccomp, SCMP_ARCH_X86);
if (r < 0 && r != -EEXIST) {
log_error("Failed to add x86 to seccomp filter: %s", strerror(-r));
goto finish;
}
#endif
r = seccomp_load(seccomp);
if (r < 0)
log_error("Failed to install seccomp audit filter: %s", strerror(-r));