Bug#853940: systemd: RestrictAddressFamilies causes services to fail to start on powerpc

[Michael Biebl]

Am 02.02.2017 um 15:19 schrieb Phil Armstrong:
> 
> Were these entries added to the systemd service files only recently?
> These services all started breaking for me about a week or two ago. They
> were fine beforehand.
> 
> The machine in question vaguely tracks sid. It did track testing until
> powerpc was dropped from the next Debian release & testing went away.

The sandboxing features (based on seccomp) are available in systemd
since a while, but were not actively used in .service units.

In 232-1 for a couple of systemd services, like logind, udevd or
journald those were turned on.

This caused problems on i386, so we temporarily removed them from the
.service files. seccomp support was reworked upstream and we backported
those patches in 232-11 and reenabled the sandboxing features.

I guess it would be worthwile testing 232-1 from snapshot.d.o [1]

This would show if seccomp support has been broken in previous releases
as well, or if the backported patches [2] from 232-11 caused a
regression on powerpc.

Michael

[1] http://snapshot.debian.org/
[2]
https://anonscm.debian.org/cgit/pkg-systemd/systemd.git/commit/?id=c31b5ee9b9c79c9d2ac491920b23a8084a4ccc46
-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20170202/76d28942/attachment-0002.sig>