aboutsummaryrefslogtreecommitdiffhomepage
path: root/container/init.go
diff options
context:
space:
mode:
Diffstat (limited to 'container/init.go')
-rw-r--r--container/init.go5
1 files changed, 5 insertions, 0 deletions
diff --git a/container/init.go b/container/init.go
index 885b543d..0f888fad 100644
--- a/container/init.go
+++ b/container/init.go
@@ -55,6 +55,11 @@ func Init(prepare func(prefix string), setVerbose func(verbose bool)) {
log.Fatal("this process must run as pid 1")
}
+ if err := SetPtracer(0); err != nil {
+ msg.Verbosef("cannot enable ptrace protection via Yama LSM: %v", err)
+ // not fatal: this program has no additional privileges at initial program start
+ }
+
var (
params initParams
closeSetup func() error