Skip to content

Commit 0277d8f

Browse files
committed
Isolation: Fix the enablement of PR_SET_NO_NEW_PRIVS.
This prctl(2) option is checked for in auto/isolation, unfortunately due to a typo this feature has never been enabled. In the auto/isolation script the feature name was down as NXT_HAVE_PR_SET_NO_NEW_PRIVS0, which means we end up with the following in build/nxt_auto_config.h #ifndef NXT_HAVE_PR_SET_NO_NEW_PRIVS0 #define NXT_HAVE_PR_SET_NO_NEW_PRIVS0 1 #endif Whereas everywhere else is checking for NXT_HAVE_PR_SET_NO_NEW_PRIVS. This also guards the inclusion of sys/prctl.h in src/nxt_process.c which is required by a subsequent commit. Fixes: e2b53e1 ("Added "rootfs" feature.") Reviewed-by: Alejandro Colomar <[email protected]> Signed-off-by: Andrew Clayton <[email protected]>
1 parent 1f37d81 commit 0277d8f

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

auto/isolation

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -90,7 +90,7 @@ nxt_feature_test="#include <mntent.h>
9090

9191

9292
nxt_feature="prctl(PR_SET_NO_NEW_PRIVS)"
93-
nxt_feature_name=NXT_HAVE_PR_SET_NO_NEW_PRIVS0
93+
nxt_feature_name=NXT_HAVE_PR_SET_NO_NEW_PRIVS
9494
nxt_feature_run=no
9595
nxt_feature_incs=
9696
nxt_feature_libs=

0 commit comments

Comments
 (0)