seccomp: Use PR_SPEC_FORCE_DISABLE

commit b849a812f7 upstream.

Use PR_SPEC_FORCE_DISABLE in seccomp() because seccomp does not allow to
widen restrictions.

Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
This commit is contained in:
Thomas Gleixner 2018-05-04 09:40:03 +02:00 • committed by Ben Hutchings
commit 9e48fb3d80