forked from lix-project/lix
alois31
f047e4357b
Seccomp filtering and the no-new-privileges functionality improve the security
of the sandbox, and have been enabled by default for a long time. In
lix-project/lix#265 it was decided that they
should be enabled unconditionally. Accordingly, remove the allow-new-privileges
(which had weird behavior anyway) and filter-syscall settings, and force the
security features on. Syscall filtering can still be enabled at build time to
support building on architectures libseccomp doesn't support.
Change-Id:
|
||
|---|---|---|
| .. | ||
| advanced-topics | ||
| architecture | ||
| command-ref | ||
| contributing | ||
| figures | ||
| installation | ||
| language | ||
| package-management | ||
| protocols | ||
| release-notes | ||
| _redirects | ||
| glossary.md | ||
| introduction.md | ||
| quick-start.md | ||
| SUMMARY.md | ||