forked from lix-project/lix
Seccomp filtering and the no-new-privileges functionality improve the security
of the sandbox, and have been enabled by default for a long time. In
lix-project/lix#265 it was decided that they
should be enabled unconditionally. Accordingly, remove the allow-new-privileges
(which had weird behavior anyway) and filter-syscall settings, and force the
security features on. Syscall filtering can still be enabled at build time to
support building on architectures libseccomp doesn't support.
Change-Id:
|
||
---|---|---|
.. | ||
advanced-topics | ||
architecture | ||
command-ref | ||
contributing | ||
figures | ||
installation | ||
language | ||
package-management | ||
protocols | ||
release-notes | ||
_redirects | ||
glossary.md | ||
introduction.md | ||
quick-start.md | ||
SUMMARY.md |