summaryrefslogtreecommitdiffstats
path: root/kernel/seccomp.c
diff options
context:
space:
mode:
Diffstat (limited to 'kernel/seccomp.c')
-rw-r--r--kernel/seccomp.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/kernel/seccomp.c b/kernel/seccomp.c
index d7f538847b84..38a77800def6 100644
--- a/kernel/seccomp.c
+++ b/kernel/seccomp.c
@@ -443,8 +443,8 @@ static struct seccomp_filter *seccomp_prepare_filter(struct sock_fprog *fprog)
443 * behavior of privileged children. 443 * behavior of privileged children.
444 */ 444 */
445 if (!task_no_new_privs(current) && 445 if (!task_no_new_privs(current) &&
446 security_capable_noaudit(current_cred(), current_user_ns(), 446 security_capable(current_cred(), current_user_ns(),
447 CAP_SYS_ADMIN) != 0) 447 CAP_SYS_ADMIN, CAP_OPT_NOAUDIT) != 0)
448 return ERR_PTR(-EACCES); 448 return ERR_PTR(-EACCES);
449 449
450 /* Allocate a new seccomp_filter */ 450 /* Allocate a new seccomp_filter */