Ricky Zhou 1ff120504f samples/seccomp: Enable PR_SET_NO_NEW_PRIVS in dropper ...

Either CAP_SYS_ADMIN or PR_SET_NO_NEW_PRIVS is required to enable
seccomp. This allows samples/seccomp/dropper to be run without
CAP_SYS_ADMIN.

Signed-off-by: Ricky Zhou <rickyz@chromium.org>
Signed-off-by: Kees Cook <keescook@chromium.org>

2016-11-01 08:58:10 -07:00

..

.gitignore

samples: seccomp: add .gitignore for untracked executables

2012-06-29 00:54:17 +10:00

bpf-direct.c

samples/seccomp: fix dependencies on arch macros

2012-04-19 13:44:06 +10:00

bpf-fancy.c

samples/seccomp: improve label helper

2015-02-17 14:34:55 -08:00

bpf-helper.c

samples/seccomp: improve label helper

2015-02-17 14:34:55 -08:00

bpf-helper.h

samples/seccomp: fix endianness bug in LO_ARG define

2012-08-03 14:27:40 +10:00

dropper.c

samples/seccomp: Enable PR_SET_NO_NEW_PRIVS in dropper

2016-11-01 08:58:10 -07:00

Makefile

samples/seccomp: Fix hostprogs variable

2016-11-01 08:57:42 -07:00