{"action":"created","issue":{"url":"https://api.github.com/repos/systemd/systemd/issues/3882","repository_url":"https://api.github.com/repos/systemd/systemd","labels_url":"https://api.github.com/repos/systemd/systemd/issues/3882/labels{/name}","comments_url":"https://api.github.com/repos/systemd/systemd/issues/3882/comments","events_url":"https://api.github.com/repos/systemd/systemd/issues/3882/events","html_url":"https://github.com/systemd/systemd/issues/3882","id":169159303,"number":3882,"title":"Systemd should not fail to execute when seccomp is disabled in the kernel","user":{"login":"fsateler","id":1322013,"avatar_url":"https://avatars.githubusercontent.com/u/1322013?v=3","gravatar_id":"","url":"https://api.github.com/users/fsateler","html_url":"https://github.com/fsateler","followers_url":"https://api.github.com/users/fsateler/followers","following_url":"https://api.github.com/users/fsateler/following{/other_user}","gists_url":"https://api.github.com/users/fsateler/gists{/gist_id}","starred_url":"https://api.github.com/users/fsateler/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fsateler/subscriptions","organizations_url":"https://api.github.com/users/fsateler/orgs","repos_url":"https://api.github.com/users/fsateler/repos","events_url":"https://api.github.com/users/fsateler/events{/privacy}","received_events_url":"https://api.github.com/users/fsateler/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/systemd/systemd/labels/pid1","name":"pid1","color":"c7def8"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/systemd/systemd/milestones/9","html_url":"https://github.com/systemd/systemd/milestones/v232","labels_url":"https://api.github.com/repos/systemd/systemd/milestones/9/labels","id":1893375,"number":9,"title":"v232","description":"","creator":{"login":"keszybz","id":349618,"avatar_url":"https://avatars.githubusercontent.com/u/349618?v=3","gravatar_id":"","url":"https://api.github.com/users/keszybz","html_url":"https://github.com/keszybz","followers_url":"https://api.github.com/users/keszybz/followers","following_url":"https://api.github.com/users/keszybz/following{/other_user}","gists_url":"https://api.github.com/users/keszybz/gists{/gist_id}","starred_url":"https://api.github.com/users/keszybz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/keszybz/subscriptions","organizations_url":"https://api.github.com/users/keszybz/orgs","repos_url":"https://api.github.com/users/keszybz/repos","events_url":"https://api.github.com/users/keszybz/events{/privacy}","received_events_url":"https://api.github.com/users/keszybz/received_events","type":"User","site_admin":false},"open_issues":9,"closed_issues":7,"state":"open","created_at":"2016-07-20T03:20:34Z","updated_at":"2016-08-11T10:36:57Z","due_on":null,"closed_at":null},"comments":6,"created_at":"2016-08-03T15:21:57Z","updated_at":"2016-08-11T10:48:04Z","closed_at":null,"body":"### Submission type\r\n\r\n  - Bug report\r\n\r\n### systemd version the issue has been seen with\r\n\r\n> 231\r\n\r\n### Used distribution\r\n\r\n> Debian\r\n\r\n### In case of bug report: Expected behaviour you didn't see\r\n\r\nSuccessful boot on a systemd built with seccomp support but without kernel support (ie, CONFIG_SECCOMP unset).\r\n\r\n### In case of bug report: Unexpected behaviour you saw\r\n\r\nFailure to boot as several services had SystemCallFilters applied in 231.\r\n\r\nThis was reported [downstream](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=832713). The debian kernels on arm* do not have SECCOMP enabled (not sure why), and this failure to boot as logind and journald fail to execute.\r\n\r\nI think the fix would be to have an equivalent to `mac_selinux_use` for seccomp, and skip the setup in case it is not available."},"comment":{"url":"https://api.github.com/repos/systemd/systemd/issues/comments/239128444","html_url":"https://github.com/systemd/systemd/issues/3882#issuecomment-239128444","issue_url":"https://api.github.com/repos/systemd/systemd/issues/3882","id":239128444,"user":{"login":"poettering","id":2130732,"avatar_url":"https://avatars.githubusercontent.com/u/2130732?v=3","gravatar_id":"","url":"https://api.github.com/users/poettering","html_url":"https://github.com/poettering","followers_url":"https://api.github.com/users/poettering/followers","following_url":"https://api.github.com/users/poettering/following{/other_user}","gists_url":"https://api.github.com/users/poettering/gists{/gist_id}","starred_url":"https://api.github.com/users/poettering/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/poettering/subscriptions","organizations_url":"https://api.github.com/users/poettering/orgs","repos_url":"https://api.github.com/users/poettering/repos","events_url":"https://api.github.com/users/poettering/events{/privacy}","received_events_url":"https://api.github.com/users/poettering/received_events","type":"User","site_admin":false},"created_at":"2016-08-11T10:48:04Z","updated_at":"2016-08-11T10:48:04Z","body":"i think we should really work on any kernel we find. And always log about issues where we can't apply the requested security features. However, it should be at LOG_DEBUG and non-fatal if the feature is explicitly not enabled in the kernel, and LOG_ERROR and fatal in all other cases."}}
{"actor":{"display_login":"poettering"}}