chiark / gitweb /
nspawn: make socket(AF_NETLINK, *, NETLINK_AUDIT) fail with EAFNOTSUPPORT in containers
authorLennart Poettering <lennart@poettering.net>
Thu, 13 Feb 2014 19:30:02 +0000 (20:30 +0100)
committerLennart Poettering <lennart@poettering.net>
Thu, 13 Feb 2014 19:30:02 +0000 (20:30 +0100)
commit24fb111207566f3bb33c6438714fb5df44ed4305
treef551c2c69858686df063e6b7843636e287224502
parent69c79d3c32ff4d6a572ee1cdec248b27df1fb6ca
nspawn: make socket(AF_NETLINK, *, NETLINK_AUDIT) fail with EAFNOTSUPPORT in containers

The kernel still doesn't support audit in containers, so let's make use
of seccomp and simply turn it off entirely. We can get rid of this big
as soon as the kernel is fixed again.
Makefile.am
src/nspawn/nspawn.c