forked from Minki/linux
1ff120504f
Either CAP_SYS_ADMIN or PR_SET_NO_NEW_PRIVS is required to enable seccomp. This allows samples/seccomp/dropper to be run without CAP_SYS_ADMIN. Signed-off-by: Ricky Zhou <rickyz@chromium.org> Signed-off-by: Kees Cook <keescook@chromium.org> |
||
---|---|---|
.. | ||
.gitignore | ||
bpf-direct.c | ||
bpf-fancy.c | ||
bpf-helper.c | ||
bpf-helper.h | ||
dropper.c | ||
Makefile |