diff options
| author | Etienne CHAMPETIER <champetier.etienne@gmail.com> | 2015-08-27 01:26:43 +0200 |
|---|---|---|
| committer | John Crispin <blogic@openwrt.org> | 2015-10-03 08:57:13 +0200 |
| commit | 2059c75baa34f0f5952eedea6c25ae42232e89e5 (patch) | |
| tree | bc4ca3927d1b582b795ab7e4e155d4d5aff4c3ef /jail/seccomp-bpf.h | |
| parent | 2fbf65b21961c8ea9d31f67d853992ac18dfad42 (diff) | |
| download | unitd-2059c75baa34f0f5952eedea6c25ae42232e89e5.tar unitd-2059c75baa34f0f5952eedea6c25ae42232e89e5.zip | |
jail, seccomp: remove useless root check
prctl(PR_SET_NO_NEW_PRIVS, 1) is enough, we don't require CAP_SYS_ADMIN
see
https://www.kernel.org/doc/Documentation/prctl/seccomp_filter.txt
https://www.kernel.org/doc/Documentation/prctl/no_new_privs.txt
Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
Diffstat (limited to 'jail/seccomp-bpf.h')
0 files changed, 0 insertions, 0 deletions