| commit | 1ff120504f8c322a03fbce035d99e29e741da725 | [log] [tgz] |
|---|---|---|
| author | Ricky Zhou <rickyz@chromium.org> | Thu Oct 13 10:34:08 2016 -0700 |
| committer | Kees Cook <keescook@chromium.org> | Tue Nov 01 08:58:10 2016 -0700 |
| tree | 08c14543552cc15c4bd918ea0bd062483b6cfeda | |
| parent | 0af04ba5640dd6318f117a9fcbfde886516a0220 [diff] |
samples/seccomp: Enable PR_SET_NO_NEW_PRIVS in dropper Either CAP_SYS_ADMIN or PR_SET_NO_NEW_PRIVS is required to enable seccomp. This allows samples/seccomp/dropper to be run without CAP_SYS_ADMIN. Signed-off-by: Ricky Zhou <rickyz@chromium.org> Signed-off-by: Kees Cook <keescook@chromium.org>