sandbox: Only load seccomp policy once

diff --git a/mkosi/sandbox.py b/mkosi/sandbox.py
index 558aa6b85cbb5899f354b53a39f82bfe4e8dbe95..34cbfaa576488c4230c65492f0674c611514a9aa 100755 (executable)
--- a/mkosi/sandbox.py
+++ b/mkosi/sandbox.py
@@ -278,9 +278,9 @@ def seccomp_suppress(*, chown: bool = False, sync: bool = False) -> None:
             if r < 0:
                 oserror("seccomp_rule_add_exact", errno=r)
 
-            r = libseccomp.seccomp_load(seccomp)
-            if r < 0:
-                oserror("seccomp_load", errno=r)
+        r = libseccomp.seccomp_load(seccomp)
+        if r < 0:
+            oserror("seccomp_load", errno=r)
     finally:
         libseccomp.seccomp_release(seccomp)