nspawn: ignore --suppress-sync=yes when seccomp is disabled

Follow-up for 4a4654e024.

Fixes #21090.
This commit is contained in:
Yu Watanabe
2021-10-22 23:43:20 +02:00
committed by Lennart Poettering
parent dbf1aca619
commit 20e458ae3c
+4
View File
@@ -3405,9 +3405,13 @@ static int inner_child(
}
if (arg_suppress_sync) {
#if HAVE_SECCOMP
r = seccomp_suppress_sync();
if (r < 0)
log_debug_errno(r, "Failed to install sync() suppression seccomp filter, ignoring: %m");
#else
log_debug("systemd is built without SECCOMP support. Ignoring --suppress-sync= command line option and SuppressSync= setting.")
#endif
}
#if HAVE_SELINUX