nspawn: x86 is special with its socketcall() semantics, be permissive in the seccomp...

diff --git a/src/nspawn/nspawn.c b/src/nspawn/nspawn.c
index 54f71877542538507a571068348473e0f22fc399..379ea92355e6f512c15b06ad04fcf3b66fd63f7e 100644 (file)
--- a/src/nspawn/nspawn.c
+++ b/src/nspawn/nspawn.c
@@ -1531,7 +1531,7 @@ static int audit_still_doesnt_work_in_containers(void) {
                 goto finish;
         }
 
-        r = seccomp_rule_add_exact(
+        r = seccomp_rule_add(
                         seccomp,
                         SCMP_ACT_ERRNO(EAFNOSUPPORT),
                         SCMP_SYS(socket),