Permission denied about disable_sendfile_vbox_linux

[wader]

Hi, can you try to add this just before the seccompsyscall:

// for some reason not defined for some archs in syscall package
// https://github.com/torvalds/linux/blob/master/include/uapi/linux/prctl.h
const PR_SET_NO_NEW_PRIVS = 38

if r1, r2, errno :=
	syscall.Syscall(
		uintptr(syscall.SYS_PRCTL),
		uintptr(PR_SET_NO_NEW_PRIVS),
		uintptr(1),
		uintptr(0)); errno != 0 {
	fmt.Printf("WARNING: prctl PR_SET_NO_NEW_PRIVS FAILED r1=%d r2=%d %v\n", r1, r2, errno)
	return
}

That seems to work for me.

[wader]

Nice if it works as then you would not need --cap-add=SYS_ADMIN when using it with docker

[cjauvin]

Hi, yes: it seems to work for me as well, thanks!

[wader]

@cjauvin Nice! thanks for the report!