From 5bfbd6c8fe00ecb411130135a451ac35b3ec3eea Mon Sep 17 00:00:00 2001 From: criyle Date: Fri, 14 Jun 2024 10:26:07 +0000 Subject: [PATCH] forkexec: fix unshare cgroup with ptracer --- pkg/forkexec/fork_child_linux.go | 8 -------- 1 file changed, 8 deletions(-) diff --git a/pkg/forkexec/fork_child_linux.go b/pkg/forkexec/fork_child_linux.go index f1d8b64..67992a0 100644 --- a/pkg/forkexec/fork_child_linux.go +++ b/pkg/forkexec/fork_child_linux.go @@ -356,14 +356,6 @@ func forkAndExecInChild(r *Runner, argv0 *byte, argv, env []*byte, workdir, host childExitError(pipe, LocSetCap, err1) } } - - if r.Seccomp != nil { - // Load seccomp filter - _, _, err1 = syscall.RawSyscall(unix.SYS_SECCOMP, SECCOMP_SET_MODE_FILTER, SECCOMP_FILTER_FLAG_TSYNC, uintptr(unsafe.Pointer(r.Seccomp))) - if err1 != 0 { - childExitError(pipe, LocSeccomp, err1) - } - } } } _, _, err1 = syscall.RawSyscall(syscall.SYS_PTRACE, uintptr(syscall.PTRACE_TRACEME), 0, 0)