projects / project / procd.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2fbf65b) | patch
jail, seccomp: remove useless root check
authorEtienne CHAMPETIER <champetier.etienne@gmail.com>
Wed, 26 Aug 2015 23:26:43 +0000 (23:26 +0000)
committerJohn Crispin <blogic@openwrt.org>
Sat, 3 Oct 2015 06:57:13 +0000 (08:57 +0200)
commit2059c75baa34f0f5952eedea6c25ae42232e89e5
treebc4ca3927d1b582b795ab7e4e155d4d5aff4c3eftree | snapshot
parent2fbf65b21961c8ea9d31f67d853992ac18dfad42commit | diff
jail, seccomp: remove useless root check

prctl(PR_SET_NO_NEW_PRIVS, 1) is enough, we don't require CAP_SYS_ADMIN
see
https://www.kernel.org/doc/Documentation/prctl/seccomp_filter.txt
https://www.kernel.org/doc/Documentation/prctl/no_new_privs.txt

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
jail/preload.c diff | blob | history
OpenWrt service / process manager