From: Zbigniew Jędrzejewski-Szmek Date: Sat, 22 Aug 2020 11:30:18 +0000 (+0200) Subject: nspawn: turn on higher optimization level in seccomp X-Git-Tag: v247-rc1~375^2~1 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=d75615f398a0fbf986cf03924462863ca6ee2f9f;p=thirdparty%2Fsystemd.git nspawn: turn on higher optimization level in seccomp $ sudo ./dump_seccomp_filter $PIDOF_NSPAWN_PAYLOAD obj $ ~/src/libseccomp/build/tools/scmp_bpf_disasm = 5) || SCMP_VER_MAJOR > 2 + /* We have a large filter here, so let's turn on the binary tree mode if possible. */ + r = seccomp_attr_set(ctx, SCMP_FLTATR_CTL_OPTIMIZE, 2); + if (r < 0) + return r; +#endif + return 0; }