From: Daan De Meyer <daan.j.demeyer@gmail.com>
Date: Fri, 10 Oct 2025 14:05:33 +0000 (+0200)
Subject: sandbox: Only load seccomp policy once
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F3962%2Fhead;p=thirdparty%2Fmkosi.git

sandbox: Only load seccomp policy once
---

diff --git a/mkosi/sandbox.py b/mkosi/sandbox.py
index 558aa6b85..34cbfaa57 100755
--- a/mkosi/sandbox.py
+++ b/mkosi/sandbox.py
@@ -278,9 +278,9 @@ def seccomp_suppress(*, chown: bool = False, sync: bool = False) -> None:
             if r < 0:
                 oserror("seccomp_rule_add_exact", errno=r)
 
-            r = libseccomp.seccomp_load(seccomp)
-            if r < 0:
-                oserror("seccomp_load", errno=r)
+        r = libseccomp.seccomp_load(seccomp)
+        if r < 0:
+            oserror("seccomp_load", errno=r)
     finally:
         libseccomp.seccomp_release(seccomp)