X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=src%2Fcore%2Fmain.c;h=b5bb3f6805d77285651a852daba58679dac76639;hb=8a8bf3c045d50917cea76ae5a6e659fca0c03e03;hp=ed64dd167b924de9b639299f36e1a40d57898ffa;hpb=37c47eb7098cd39733de83c98d06fb67870bb825;p=elogind.git

diff --git a/src/core/main.c b/src/core/main.c
index ed64dd167..b5bb3f680 100644
--- a/src/core/main.c
+++ b/src/core/main.c
@@ -1191,6 +1191,12 @@ static int enforce_syscall_archs(Set *archs) {
                 }
         }
 
+        r = seccomp_attr_set(seccomp, SCMP_FLTATR_CTL_NNP, 0);
+        if (r < 0) {
+                log_error("Failed to unset NO_NEW_PRIVS: %s", strerror(-r));
+                goto finish;
+        }
+
         r = seccomp_load(seccomp);
         if (r < 0)
                 log_error("Failed to add install architecture seccomp: %s", strerror(-r));