core: add new RestrictNamespaces= unit file setting

[thirdparty/systemd.git] / src / shared / seccomp-util.h

diff --git a/src/shared/seccomp-util.h b/src/shared/seccomp-util.h
index f0b9f455ab1019923ae42b3bbbb6ca992e0b7bf0..438a6671bcef1cf7d28c78daa6f0302d87a3f7ad 100644 (file)
--- a/src/shared/seccomp-util.h
+++ b/src/shared/seccomp-util.h
@@ -66,3 +66,5 @@ const SyscallFilterSet *syscall_filter_set_find(const char *name);
 int seccomp_add_syscall_filter_set(scmp_filter_ctx seccomp, const SyscallFilterSet *set, uint32_t action);
 
 int seccomp_load_filter_set(uint32_t default_action, const SyscallFilterSet *set, uint32_t action);
+
+int seccomp_restrict_namespaces(unsigned long retain);