GitLab/ocserv
1
0
Fork 0
mirror of https://gitlab.com/openconnect/ocserv.git synced 2026-10-14 02:22:03 +08:00
Code Issues Packages Projects Releases Wiki Activity

replaced use-seccomp by isolate-workers

Browse Source 
That, if enabled, includes the Linux namespaces restrictions into workers.
This commit is contained in:
Nikos Mavrogiannopoulos
2015-01-15 10:25:23 +01:00
parent 7a51462abd
commit fe848ad153
6 changed files with 26 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/config.c
+11 -4
View File
@@ -90,6 +90,7 @@ static struct cfg_options available_options[] = {
{ .name = "occtl-socket-file", .type = OPTION_STRING, .mandatory = 0 },
{ .name = "banner", .type = OPTION_STRING, .mandatory = 0 },
{ .name = "use-seccomp", .type = OPTION_BOOLEAN, .mandatory = 0 },
{ .name = "isolate-worker", .type = OPTION_BOOLEAN, .mandatory = 0 },
{ .name = "predictable-ips", .type = OPTION_BOOLEAN, .mandatory = 0 },
{ .name = "session-control", .type = OPTION_BOOLEAN, .mandatory = 0 },
{ .name = "auto-select-group", .type = OPTION_BOOLEAN, .mandatory = 0 },
@@ -569,10 +570,16 @@ unsigned force_cert_auth;
config->cisco_client_compat = 1;
}
READ_TF("use-seccomp", config->seccomp, 0);
#ifndef HAVE_LIBSECCOMP
if (config->seccomp != 0) {
fprintf(stderr, "error: 'use-seccomp' is set to true, but not compiled with seccomp support\n");
READ_TF("use-seccomp", config->isolate, 0);
if (config->isolate) {
fprintf(stderr, "note that 'use-seccomp' was replaced by 'isolate-workers'\n");
config->cisco_client_compat = 1;
} else {
READ_TF("isolate-workers", config->isolate, 0);
}
#if !defined(HAVE_LIBSECCOMP) && !defined(ENABLE_LINUX_NS)
if (config->isolate != 0) {
fprintf(stderr, "error: 'isolate-workers' is set to true, but not compiled with seccomp or Linux namespaces support\n");
exit(1);
}
#endif