seccomp: Use PR_SPEC_FORCE_DISABLE
authorThomas Gleixner <tglx@linutronix.de>
Fri, 4 May 2018 07:40:03 +0000 (09:40 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 22 May 2018 14:58:01 +0000 (16:58 +0200)
commitc71def81cd07e1bd74da468ae6abe1ce62e3157b
treebcd1e42b928efc6ffa3463a26572152579d58dee
parent036608d62a838aeb63cae0adaf8ac773cb53148c
seccomp: Use PR_SPEC_FORCE_DISABLE

commit b849a812f7eb92e96d1c8239b06581b2cfd8b275 upstream

Use PR_SPEC_FORCE_DISABLE in seccomp() because seccomp does not allow to
widen restrictions.

Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Signed-off-by: David Woodhouse <dwmw@amazon.co.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
kernel/seccomp.c