From 73a895df6168bc12559d1fa16aae7e52646d7ec3 Mon Sep 17 00:00:00 2001 From: Andrey Konovalov Date: Thu, 18 May 2017 17:03:02 +0200 Subject: csource: use sandbox only when required --- executor/common.h | 2 ++ 1 file changed, 2 insertions(+) (limited to 'executor') diff --git a/executor/common.h b/executor/common.h index 609bab1c8..4ee1cd140 100644 --- a/executor/common.h +++ b/executor/common.h @@ -644,6 +644,7 @@ static uintptr_t execute_syscall(int nr, uintptr_t a0, uintptr_t a1, uintptr_t a } } +#if defined(SYZ_EXECUTOR) || defined(SYZ_SANDBOX_NONE) || defined(SYZ_SANDBOX_SETUID) || defined(SYZ_SANDBOX_NAMESPACE) static void loop(); static void sandbox_common() @@ -667,6 +668,7 @@ static void sandbox_common() unshare(CLONE_NEWIPC); unshare(CLONE_IO); } +#endif #if defined(SYZ_EXECUTOR) || defined(SYZ_SANDBOX_NONE) static int do_sandbox_none(int executor_pid, bool enable_tun) -- cgit mrf-deployment