jail: don't fail unless requirejail is set

[oweals/procd.git] / service / instance.c

diff --git a/service/instance.c b/service/instance.c
index 47d563cf9c0ebf27fc36a9ae2c1953d296ace9d8..75fd91ff079076928b85fae1665b79bef3c60a3f 100644 (file)
--- a/service/instance.c
+++ b/service/instance.c
@@ -289,6 +289,9 @@ jail_run(struct service_instance *in, char **argv)
                argv[argc++] = in->tmpoverlaysize;
        }
 
+       if (in->require_jail)
+               argv[argc++] = "-E";
+
        blobmsg_list_for_each(&jail->mount, var) {
                const char *type = blobmsg_data(var->data);