Eduardo Otubo 24f8cdc572 seccomp: add resourcecontrol argument to command line ...

This patch adds [,resourcecontrol=deny] to `-sandbox on' option. It
blacklists all process affinity and scheduler priority system calls to
avoid any bigger of the process.

Signed-off-by: Eduardo Otubo <otubo@redhat.com>

2017-09-15 10:15:06 +02:00

5.4 KiB

Raw Blame History

View Raw