CMake: Fix sabotaged Landlock sandbox check.

It never enabled it.
This commit is contained in:
Lasse Collin 2024-03-30 14:36:28 +02:00
parent af071ef770
commit f9cf4c05ed

View File

@ -1001,7 +1001,7 @@ if(NOT SANDBOX_FOUND AND ENABLE_SANDBOX MATCHES "^ON$|^landlock$")
#include <linux/landlock.h> #include <linux/landlock.h>
#include <sys/syscall.h> #include <sys/syscall.h>
#include <sys/prctl.h> #include <sys/prctl.h>
.
void my_sandbox(void) void my_sandbox(void)
{ {
(void)prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0); (void)prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0);