fix seccomp for the new event loop

add/remove syscalls from the BPF filter and move sandbox() after
libevent initialisation

1 files changed, 2 insertions, 0 deletions

diff --git a/server.c b/server.c
index daeeb93..d7e5108 100644
--- a/server.c
+++ b/server.c
@@ -1059,5 +1059,7 @@ loop(struct tls *ctx, int sock4, int sock6)
 
 	server.ctx = ctx;
 
+	sandbox();
 	event_dispatch();
+	_exit(0);
 }