don't warn about seccomp if no_new_privileges is not Some(true)

Signed-off-by: Jerome Gravel-Niquet <jeromegn@gmail.com>
youki-dev · Apr 9, 2024 · 68973b6 · 68973b6
1 parent f535c45
commit 68973b6
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/crates/libcontainer/src/process/container_init_process.rs b/crates/libcontainer/src/process/container_init_process.rs
@@ -560,7 +560,7 @@ pub fn container_init_process(
         }
     }
     #[cfg(not(feature = "libseccomp"))]
-    if proc.no_new_privileges().is_none() {
+    if proc.no_new_privileges().unwrap_or_default() {
         tracing::warn!("seccomp not available, unable to enforce no_new_privileges!")
     }
 
@@ -621,7 +621,7 @@ pub fn container_init_process(
         }
     }
     #[cfg(not(feature = "libseccomp"))]
-    if proc.no_new_privileges().is_some() {
+    if proc.no_new_privileges().unwrap_or_default() {
         tracing::warn!("seccomp not available, unable to set seccomp privileges!")
     }