From a387deeef7858653f27a835509ab420d55769307 Mon Sep 17 00:00:00 2001 From: netblue30 Date: Sun, 5 Feb 2017 11:16:45 -0500 Subject: enable strict seccomp filter on overlay options --- src/firejail/sandbox.c | 8 -------- 1 file changed, 8 deletions(-) (limited to 'src') diff --git a/src/firejail/sandbox.c b/src/firejail/sandbox.c index e56526f34..81cce7e98 100644 --- a/src/firejail/sandbox.c +++ b/src/firejail/sandbox.c @@ -630,10 +630,6 @@ int sandbox(void* sandbox_arg) { #ifdef HAVE_OVERLAYFS if (arg_overlay) { fs_overlayfs(); - -//todo - bring it back for overlay-named -#if 0 - fs_overlayfs(); // force caps and seccomp if not started as root if (getuid() != 0) { enforce_filters(); @@ -643,10 +639,6 @@ int sandbox(void* sandbox_arg) { } else arg_seccomp = 1; -#endif - - - } else #endif -- cgit v1.2.3-70-g09d2