diff options
| author | Greg Steuck <blackgnezdo@gmail.com> | 2018-12-10 22:39:44 -0800 |
|---|---|---|
| committer | Dmitry Vyukov <dvyukov@google.com> | 2018-12-11 07:39:44 +0100 |
| commit | d90f8af59cdcebab382707098f32c87f950ab5df (patch) | |
| tree | 6a356ee5a90047dd2398fc39c19241af73a4a27c /pkg/host/host_openbsd.go | |
| parent | 4093e33b1338f274ae0062f555de9d6af8640d61 (diff) | |
executor: reapply setuid sandbox for bsd
* Revert "Revert "executor: add setuid sandbox for openbsd""
The problem is the low file descriptor limit.
This reverts commit 4093e33b1338f274ae0062f555de9d6af8640d61.
* executor/executor make sure the file descriptor limit is sufficient
Diffstat (limited to 'pkg/host/host_openbsd.go')
| -rw-r--r-- | pkg/host/host_openbsd.go | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/pkg/host/host_openbsd.go b/pkg/host/host_openbsd.go index f750929a5..35e8a0298 100644 --- a/pkg/host/host_openbsd.go +++ b/pkg/host/host_openbsd.go @@ -14,4 +14,5 @@ func isSupported(c *prog.Syscall, sandbox string) (bool, string) { func init() { checkFeature[FeatureCoverage] = unconditionallyEnabled checkFeature[FeatureNetworkInjection] = unconditionallyEnabled + checkFeature[FeatureSandboxSetuid] = unconditionallyEnabled } |