Bug#853940: systemd: RestrictAddressFamilies causes services to fail to start on powerpc

[Phil Armstrong]

On 02/02/17 22:37, Phil Armstrong wrote:
> On 02/02/17 21:50, Michael Biebl wrote:
>>
>> Are you absolutely sure? We had another bug report who said that
>> downgrading systemd+udev to 232-1 did fix the problem on ppc(64).
>
> This is a ppc32 system, so maybe that makes the difference? I’ll test 
> it again over the weekend.

I must have made an error before: After carefully binary chopping the 
systemd package versions from snapshot.debian.org, I can report that the 
last version to work correctly is systemd 232-10. 232-11 fails.

Looking at the changelog & the service files, this is kind of 
unsurprising: the service files for 232-10 don’t contain any 
RestrictAddressFamilies entries on my system, whereas the ones for 
232-11 do & the changelog for 232-11 contains this entry:

  * Fix RestrictAddressFamilies=
     Backport upstream fix for setting up seccomp filters to fix
     RestrictAddressFamilies= on non-amd64 architectures. Drop the hack from
     debian/rules to remove this property from unit files.
     See #843160

So either the upstream fix doesn’t work on powerpc32 or the backport is 
broken somehow. I appreciate that ppc32 is a minority platform at this 
point.

cheers, Phil