nspawn: x86 is special with its socketcall() semantics, be permissive in the seccomp setup

2014-02-18 22:27:46 +01:00 · 2014-02-18 22:27:46 +01:00 · 3302da4667
parent e9642be2cc
commit 3302da4667
1 changed files with 1 additions and 1 deletions
--- a/src/nspawn/nspawn.c
+++ b/src/nspawn/nspawn.c
@ -1531,7 +1531,7 @@ static int audit_still_doesnt_work_in_containers(void) {
                goto finish;
        }

-        r = seccomp_rule_add_exact(
+        r = seccomp_rule_add(
                        seccomp,
                        SCMP_ACT_ERRNO(EAFNOSUPPORT),
                        SCMP_SYS(socket),