Alois Wohlschlager f047e4357b libstore/build: always enable seccomp filtering and no-new-privileges ... Seccomp filtering and the no-new-privileges functionality improve the security of the sandbox, and have been enabled by default for a long time. In https://git.lix.systems/lix-project/lix/issues/265 it was decided that they should be enabled unconditionally. Accordingly, remove the allow-new-privileges (which had weird behavior anyway) and filter-syscall settings, and force the security features on. Syscall filtering can still be enabled at build time to support building on architectures libseccomp doesn't support. Change-Id: Iedbfa18d720ae557dee07a24f69b2520f30119cb		2024-05-24 21:19:29 +00:00
..
internal-api	build: make internal-api-docs PHONY	2024-05-23 14:11:10 -06:00
manual	libstore/build: always enable seccomp filtering and no-new-privileges	2024-05-24 21:19:29 +00:00