Require seccomp only in multi-user setups

2017-05-30 12:37:04 +02:00
parent 1d9ab273ba
commit ff6becafa8
1 changed files with 5 additions and 1 deletions
--- a/src/libstore/build.cc
+++ b/src/libstore/build.cc
@@ -2345,7 +2345,11 @@ void DerivationGoal::runChild()

        commonChildInit(builderOut);

-        setupSeccomp();
+        try {
+            setupSeccomp();
+        } catch (...) {
+            if (buildUser) throw;
+        }

        bool setUser = true;