forked from lix-project/lix
Alois Wohlschlager
f047e4357b
Seccomp filtering and the no-new-privileges functionality improve the security
of the sandbox, and have been enabled by default for a long time. In
lix-project/lix#265 it was decided that they
should be enabled unconditionally. Accordingly, remove the allow-new-privileges
(which had weird behavior anyway) and filter-syscall settings, and force the
security features on. Syscall filtering can still be enabled at build time to
support building on architectures libseccomp doesn't support.
Change-Id:
|
||
|---|---|---|
| .. | ||
| building-source.md | ||
| env-variables.md | ||
| installation.md | ||
| installing-binary.md | ||
| installing-docker.md | ||
| installing-source.md | ||
| multi-user.md | ||
| nix-security.md | ||
| obtaining-source.md | ||
| prerequisites-source.md | ||
| single-user.md | ||
| supported-platforms.md | ||
| uninstall.md | ||
| upgrading.md | ||