diff options
Diffstat (limited to 'src/jail.c')
-rw-r--r-- | src/jail.c | 4 |
1 files changed, 3 insertions, 1 deletions
@@ -15,6 +15,7 @@ #include "capabilities.h" #include "utils.h" #include "log.h" +#include "options.h" typedef struct prisoner_process { psocket client_psock; @@ -373,7 +374,8 @@ static int jail_childfn(prisoner_process *ctx) ); pseccomp_set_immutable(); - pseccomp_init(&psc, 0); + pseccomp_init(&psc, + (getopt_used(OPT_SECCOMP_MINIMAL) ? PS_MINIMUM : 0)); if (pseccomp_jail_rules(psc)) FATAL("%s", "SECCOMP: adding jail rules"); pseccomp_free(&psc); |