From d90f8af59cdcebab382707098f32c87f950ab5df Mon Sep 17 00:00:00 2001 From: Greg Steuck Date: Mon, 10 Dec 2018 22:39:44 -0800 Subject: executor: reapply setuid sandbox for bsd * Revert "Revert "executor: add setuid sandbox for openbsd"" The problem is the low file descriptor limit. This reverts commit 4093e33b1338f274ae0062f555de9d6af8640d61. * executor/executor make sure the file descriptor limit is sufficient --- pkg/host/host_openbsd.go | 1 + 1 file changed, 1 insertion(+) (limited to 'pkg/host/host_openbsd.go') diff --git a/pkg/host/host_openbsd.go b/pkg/host/host_openbsd.go index f750929a5..35e8a0298 100644 --- a/pkg/host/host_openbsd.go +++ b/pkg/host/host_openbsd.go @@ -14,4 +14,5 @@ func isSupported(c *prog.Syscall, sandbox string) (bool, string) { func init() { checkFeature[FeatureCoverage] = unconditionallyEnabled checkFeature[FeatureNetworkInjection] = unconditionallyEnabled + checkFeature[FeatureSandboxSetuid] = unconditionallyEnabled } -- cgit mrf-deployment