mirror of
https://github.com/opnsense/src.git
synced 2026-06-09 08:43:19 -04:00
MFp4 @229488:
Sandbox unprivileged process using capability mode. Reviewed by: brooks Sponsored by: The FreeBSD Foundation
This commit is contained in:
parent
a6f38228d4
commit
8da93e6861
1 changed files with 3 additions and 0 deletions
|
|
@ -511,6 +511,9 @@ main(int argc, char *argv[])
|
|||
|
||||
setproctitle("%s", ifi->name);
|
||||
|
||||
if (cap_enter() < 0 && errno != ENOSYS)
|
||||
error("can't enter capability mode: %m");
|
||||
|
||||
if (immediate_daemon)
|
||||
go_daemon();
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue