[master] release seccomp context when finished

2014-06-16 11:19:40 -07:00
parent 4278293107
commit 940b03cef2
1 changed files with 9 additions and 4 deletions
@@ -814,12 +814,17 @@ setup_seccomp() {
 		isc_log_write(ns_g_lctx, NS_LOGCATEGORY_GENERAL,
 			      NS_LOGMODULE_MAIN, ISC_LOG_WARNING,
 			      "libseccomp unable to load filter");
-		return;
+	} else {
+		isc_log_write(ns_g_lctx, NS_LOGCATEGORY_GENERAL,
+			      NS_LOGMODULE_MAIN, ISC_LOG_NOTICE,
+			      "libseccomp sandboxing active");
 	}

-	isc_log_write(ns_g_lctx, NS_LOGCATEGORY_GENERAL,
-		      NS_LOGMODULE_MAIN, ISC_LOG_NOTICE,
-		      "libseccomp sandboxing active");
+	/*
+	 * Release filter in ctx. Filters already loaded are not
+	 * affected.
+	 */
+	seccomp_release(ctx);
 }
 #endif /* HAVE_LIBSECCOMP */