From: Michal Sojka <sojkam1@fel.cvut.cz>
Date: Tue, 12 Sep 2017 11:12:35 +0000 (+0200)
Subject: Do not disable seccomp when configuration is not found
X-Git-Url: https://git.archive.openwrt.org/?a=commitdiff_plain;h=c8faedc1fff6e37fbcf7c6d449888dd1e7bdf9cd;hp=c8faedc1fff6e37fbcf7c6d449888dd1e7bdf9cd;p=project%2Fprocd.git

Do not disable seccomp when configuration is not found

Previously, when seccomp configuration file for a service was not
found, the service was started without seccomp. I consider this
potential attack vector.

With this change, procd starts the service as if the configuration
existed but the service fails in libpreload-seccomp.so, because the
configuration cannot be loaded. This is announced in the syslog.

Signed-off-by: Michal Sojka <sojkam1@fel.cvut.cz>
---