diff options
author | Victor Hsieh <victorhsieh@google.com> | 2018-01-15 11:04:26 -0800 |
---|---|---|
committer | Victor Hsieh <victorhsieh@google.com> | 2018-01-15 11:37:49 -0800 |
commit | dab45ad9360c78569a21e0e596d52586f996a675 (patch) | |
tree | c75c710a4e7a8a4f9a7ed13ab93b88222813c93f /tests/stdio_test.cpp | |
parent | 25a3087d6dde58e126c5ecb1033319ff333fcc59 (diff) |
Do not set PR_SET_NO_NEW_PRIVS when install seccomp filter
Setting PR_SET_NO_NEW_PRIVS actually breaks SELinux domain transition
(of debuggerd, for example). Do not set the bit when install the filter.
Instead, the caller must either have done it, or have CAP_SYS_ADMIN.
Test: build
Bug: 63944145
Bug: 71859146
Change-Id: I2af334fed61cac03fd0b3b5c8866e2e72b31cf17
Diffstat (limited to 'tests/stdio_test.cpp')
0 files changed, 0 insertions, 0 deletions