Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 9c0bbee8 authored by Alexey Dobriyan's avatar Alexey Dobriyan Committed by Ingo Molnar
Browse files

seccomp: drop now bogus dependency on PROC_FS 



seccomp is prctl(2)-driven now.

Signed-off-by: default avatarAlexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: default avatarIngo Molnar <mingo@elte.hu>
parent afe73824

arch/x86/Kconfig

+1 −2
Original line number Diff line number Diff line
@@ -1205,7 +1205,6 @@ config IRQBALANCE 
config SECCOMP

	def_bool y

	prompt "Enable seccomp to safely compute untrusted bytecode"

	depends on PROC_FS

	help

	  This kernel feature is useful for number crunching applications

	  that may need to compute untrusted bytecode during their
@@ -1213,7 +1212,7 @@ config SECCOMP 
	  the process as file descriptors supporting the read/write

	  syscalls, it's possible to isolate those applications in

	  their own address space using seccomp. Once seccomp is

	  enabled via /proc/<pid>/seccomp, it cannot be disabled

	  enabled via prctl(PR_SET_SECCOMP), it cannot be disabled

	  and the task is only allowed to execute a few safe syscalls

	  defined by each seccomp mode.