Signed-off-by: Wesley Marques <wesleymr.27@gmail.com>
Acked-by: Stéphane Graber <stgraber@ubuntu.com>
{
FILE *f;
int ret;
+ int check_seccomp_attr_set;
if (!conf->seccomp)
return 0;
/* turn of no-new-privs. We don't want it in lxc, and it breaks
* with apparmor */
- if (seccomp_attr_set(
#if HAVE_SCMP_FILTER_CTX
- conf->seccomp_ctx,
+ check_seccomp_attr_set = seccomp_attr_set(conf->seccomp_ctx, SCMP_FLTATR_CTL_NNP, 0);
+#else
+ check_seccomp_attr_set = seccomp_attr_set(SCMP_FLTATR_CTL_NNP, 0);
#endif
- SCMP_FLTATR_CTL_NNP, 0)) {
+ if (check_seccomp_attr_set) {
ERROR("failed to turn off n-new-privs");
return -1;
}