linux/samples/seccomp
Ricky Zhou 1ff120504f samples/seccomp: Enable PR_SET_NO_NEW_PRIVS in dropper
Either CAP_SYS_ADMIN or PR_SET_NO_NEW_PRIVS is required to enable
seccomp. This allows samples/seccomp/dropper to be run without
CAP_SYS_ADMIN.

Signed-off-by: Ricky Zhou <rickyz@chromium.org>
Signed-off-by: Kees Cook <keescook@chromium.org>
2016-11-01 08:58:10 -07:00
..
.gitignore samples: seccomp: add .gitignore for untracked executables 2012-06-29 00:54:17 +10:00
bpf-direct.c
bpf-fancy.c samples/seccomp: improve label helper 2015-02-17 14:34:55 -08:00
bpf-helper.c samples/seccomp: improve label helper 2015-02-17 14:34:55 -08:00
bpf-helper.h samples/seccomp: fix endianness bug in LO_ARG define 2012-08-03 14:27:40 +10:00
dropper.c samples/seccomp: Enable PR_SET_NO_NEW_PRIVS in dropper 2016-11-01 08:58:10 -07:00
Makefile samples/seccomp: Fix hostprogs variable 2016-11-01 08:57:42 -07:00