<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> </head> <body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""> Hey, <div class=""><br class=""> </div> <div class="">Lennart reviewed this in IRC and suggested I refactor the change in this manner. Now, we have an array of capability:sys call pairs, and iterate through that and then only add the seccomp filter if the capability doesn’t exist.</div> <div class=""><br class=""> </div> <div class="">The new patch is attached, and available here: <a href="https://github.com/jayofdoom/systemd/pull/5.patch" class="">https://github.com/jayofdoom/systemd/pull/5.patch</a>. </div> </body> </html>