chiark / gitweb /
seccomp: we should control NO_NEW_PRIVS on our own, not let seccomp do this for us