]> git.ipfire.org Git - thirdparty/lxc.git/commit
Revert "seccomp: add rules for specified architecture only" 2794/head
authorChristian Brauner <christian.brauner@ubuntu.com>
Mon, 21 Jan 2019 13:58:43 +0000 (14:58 +0100)
committerChristian Brauner <christian.brauner@ubuntu.com>
Mon, 21 Jan 2019 13:58:43 +0000 (14:58 +0100)
commit3e9671a15d68701b56a6722081aafb3ba0358f49
tree6721ce4ffd5ef2b0af2440345ac999297b7e0593
parentb6825c4b7bd3d99a1a7a9c6943e024cde4d20fd0
Revert "seccomp: add rules for specified architecture only"

This reverts commit f1bcfc796e0a4a04b36284f6261afff59123b1aa.

The reverted branch breaks starting all seccomp confined containers. Not
even a containers with our standard seccomp profile starts correctly.
This is strong evidence that these changes have never been tested even
with a standard workload. That is unacceptable!

We are still happy to merge that feature but going forward we want tests
that verify that standard workloads and new features work correctly.
seccomp is a crucial part of our security story and I will not let the
be compromised by missing tests!

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
src/lxc/seccomp.c