Require seccomp only in multi-user setups

NixOS · May 30, 2017 · ff6beca · ff6beca
1 parent 1d9ab27
commit ff6beca
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/src/libstore/build.cc b/src/libstore/build.cc
@@ -2345,7 +2345,11 @@ void DerivationGoal::runChild()
 
         commonChildInit(builderOut);
 
-        setupSeccomp();
+        try {
+            setupSeccomp();
+        } catch (...) {
+            if (buildUser) throw;
+        }
 
         bool setUser = true;