mirror of
https://github.com/criyle/go-sandbox.git
synced 2025-11-04 14:49:53 +08:00
forkexec: fix unshare cgroup with ptracer
This commit is contained in:
parent
6d21194b72
commit
5bfbd6c8fe
@ -356,14 +356,6 @@ func forkAndExecInChild(r *Runner, argv0 *byte, argv, env []*byte, workdir, host
|
|||||||
childExitError(pipe, LocSetCap, err1)
|
childExitError(pipe, LocSetCap, err1)
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
if r.Seccomp != nil {
|
|
||||||
// Load seccomp filter
|
|
||||||
_, _, err1 = syscall.RawSyscall(unix.SYS_SECCOMP, SECCOMP_SET_MODE_FILTER, SECCOMP_FILTER_FLAG_TSYNC, uintptr(unsafe.Pointer(r.Seccomp)))
|
|
||||||
if err1 != 0 {
|
|
||||||
childExitError(pipe, LocSeccomp, err1)
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
_, _, err1 = syscall.RawSyscall(syscall.SYS_PTRACE, uintptr(syscall.PTRACE_TRACEME), 0, 0)
|
_, _, err1 = syscall.RawSyscall(syscall.SYS_PTRACE, uintptr(syscall.PTRACE_TRACEME), 0, 0)
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user