mirror of
https://github.com/criyle/go-sandbox.git
synced 2025-11-04 14:49:53 +08:00
forkexec: fix unshare cgroup with ptracer
This commit is contained in:
parent
6d21194b72
commit
5bfbd6c8fe
@ -356,14 +356,6 @@ func forkAndExecInChild(r *Runner, argv0 *byte, argv, env []*byte, workdir, host
|
||||
childExitError(pipe, LocSetCap, err1)
|
||||
}
|
||||
}
|
||||
|
||||
if r.Seccomp != nil {
|
||||
// Load seccomp filter
|
||||
_, _, err1 = syscall.RawSyscall(unix.SYS_SECCOMP, SECCOMP_SET_MODE_FILTER, SECCOMP_FILTER_FLAG_TSYNC, uintptr(unsafe.Pointer(r.Seccomp)))
|
||||
if err1 != 0 {
|
||||
childExitError(pipe, LocSeccomp, err1)
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
_, _, err1 = syscall.RawSyscall(syscall.SYS_PTRACE, uintptr(syscall.PTRACE_TRACEME), 0, 0)
|
||||
|
||||
Loading…
Reference in New Issue
Block a user