mirror of
https://github.com/torvalds/linux.git
synced 2025-12-07 20:06:24 +00:00
Either CAP_SYS_ADMIN or PR_SET_NO_NEW_PRIVS is required to enable seccomp. This allows samples/seccomp/dropper to be run without CAP_SYS_ADMIN. Signed-off-by: Ricky Zhou <rickyz@chromium.org> Signed-off-by: Kees Cook <keescook@chromium.org>
1.9 KiB
1.9 KiB