Don't allow more privs.

1 files changed, 2 insertions, 0 deletions

diff --git a/honeypot.c b/honeypot.c
index 34292e6..02fc17a 100644
--- a/honeypot.c
+++ b/honeypot.c
@@ -434,6 +434,8 @@ void drop_privileges()
 	setrlimit(RLIMIT_CORE, &limit);
 	limit.rlim_cur = limit.rlim_max = 100;
 	setrlimit(RLIMIT_NPROC, &limit);
+
+	prctl(PR_SET_NO_NEW_PRIVS, 1);
 }
 
 void handle_connection(int fd, char *ipaddr)