Merge pull request #3041 from brauner/2019-06-12/seccomp_notify_fixes

seccomp: do not set SECCOMP_FILTER_FLAG_NEW_LISTENER

Merge pull request #3041 from brauner/2019-06-12/seccomp_notify_fixes
23b50e75 · Stéphane Graber · GitHub · 29597423 · f73adb35 · 23b50e75
Unverified Commit 23b50e75 authored Jun 12, 2019 by Stéphane Graber Committed by GitHub Jun 12, 2019
Hide whitespace changes
Inline Side-by-side

Showing with 0 additions and 5 deletions

seccomp.c src/lxc/seccomp.c +0 -5

No files found.
--- a/src/lxc/seccomp.c
+++ b/src/lxc/seccomp.c
@@ -944,11 +944,6 @@ static int parse_config_v2(FILE *f, char *line, size_t *line_bufsz, struct lxc_c
 #if HAVE_DECL_SECCOMP_NOTIFY_FD
 		if ((rule.action == SCMP_ACT_NOTIFY) &&
 		    !conf->seccomp.notifier.wants_supervision) {
-			ret = seccomp_attr_set(conf->seccomp.seccomp_ctx,
-					       SECCOMP_FILTER_FLAG_NEW_LISTENER, 1);
-			if (ret)
-				goto bad_rule;
-
 			conf->seccomp.notifier.wants_supervision = true;
 			TRACE("Set SECCOMP_FILTER_FLAG_NEW_LISTENER attribute");
 		}