From d75615f398a0fbf986cf03924462863ca6ee2f9f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Zbigniew=20J=C4=99drzejewski-Szmek?= Date: Sat, 22 Aug 2020 13:30:18 +0200 Subject: [PATCH] nspawn: turn on higher optimization level in seccomp $ sudo ./dump_seccomp_filter $PIDOF_NSPAWN_PAYLOAD obj $ ~/src/libseccomp/build/tools/scmp_bpf_disasm = 5) || SCMP_VER_MAJOR > 2 + /* We have a large filter here, so let's turn on the binary tree mode if possible. */ + r = seccomp_attr_set(ctx, SCMP_FLTATR_CTL_OPTIMIZE, 2); + if (r < 0) + return r; +#endif + return 0; }