diff --git a/bin/named/main.c b/bin/named/main.c index 266d84fb36..2e2f67b7d3 100644 --- a/bin/named/main.c +++ b/bin/named/main.c @@ -814,12 +814,17 @@ setup_seccomp() { isc_log_write(ns_g_lctx, NS_LOGCATEGORY_GENERAL, NS_LOGMODULE_MAIN, ISC_LOG_WARNING, "libseccomp unable to load filter"); - return; + } else { + isc_log_write(ns_g_lctx, NS_LOGCATEGORY_GENERAL, + NS_LOGMODULE_MAIN, ISC_LOG_NOTICE, + "libseccomp sandboxing active"); } - isc_log_write(ns_g_lctx, NS_LOGCATEGORY_GENERAL, - NS_LOGMODULE_MAIN, ISC_LOG_NOTICE, - "libseccomp sandboxing active"); + /* + * Release filter in ctx. Filters already loaded are not + * affected. + */ + seccomp_release(ctx); } #endif /* HAVE_LIBSECCOMP */