aboutsummaryrefslogtreecommitdiff
path: root/src/jail.c
diff options
context:
space:
mode:
Diffstat (limited to 'src/jail.c')
-rw-r--r--src/jail.c4
1 files changed, 3 insertions, 1 deletions
diff --git a/src/jail.c b/src/jail.c
index ddd1926..9ed75f8 100644
--- a/src/jail.c
+++ b/src/jail.c
@@ -15,6 +15,7 @@
#include "capabilities.h"
#include "utils.h"
#include "log.h"
+#include "options.h"
typedef struct prisoner_process {
psocket client_psock;
@@ -373,7 +374,8 @@ static int jail_childfn(prisoner_process *ctx)
);
pseccomp_set_immutable();
- pseccomp_init(&psc, 0);
+ pseccomp_init(&psc,
+ (getopt_used(OPT_SECCOMP_MINIMAL) ? PS_MINIMUM : 0));
if (pseccomp_jail_rules(psc))
FATAL("%s", "SECCOMP: adding jail rules");
pseccomp_free(&psc);