diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-04-08 01:59:45 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-04-08 01:59:45 +0900 |
| commit | 584405f7ccd4c8c0e63762e113f4650f2abd469e (patch) | |
| tree | f72d79d1a90e9bffe8f5c975e564ad40c602f2f7 /cmd | |
| parent | 50127ed5f9bc89f38c7d5d1aa06b4d99229b9c64 (diff) | |
sandbox/seccomp: rename flag type and constants
The names are ambiguous. Rename them to make more sense.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'cmd')
| -rw-r--r-- | cmd/fpkg/app.go | 4 | ||||
| -rw-r--r-- | cmd/fpkg/with.go | 4 |
2 files changed, 4 insertions, 4 deletions
diff --git a/cmd/fpkg/app.go b/cmd/fpkg/app.go index e67ef112..c6ed60e6 100644 --- a/cmd/fpkg/app.go +++ b/cmd/fpkg/app.go @@ -111,10 +111,10 @@ func (app *appInfo) toFst(pathSet *appPathSet, argv []string, flagDropShell bool }, } if app.Multiarch { - config.Confinement.Sandbox.Seccomp |= seccomp.FlagMultiarch + config.Confinement.Sandbox.Seccomp |= seccomp.FilterMultiarch } if app.Bluetooth { - config.Confinement.Sandbox.Seccomp |= seccomp.FlagBluetooth + config.Confinement.Sandbox.Seccomp |= seccomp.FilterBluetooth } return config } diff --git a/cmd/fpkg/with.go b/cmd/fpkg/with.go index f9ffe848..92c5ba9e 100644 --- a/cmd/fpkg/with.go +++ b/cmd/fpkg/with.go @@ -39,7 +39,7 @@ func withNixDaemon( Hostname: formatHostname(app.Name) + "-" + action, Userns: true, // nix sandbox requires userns Net: net, - Seccomp: seccomp.FlagMultiarch, + Seccomp: seccomp.FilterMultiarch, Tty: dropShell, Filesystem: []*fst.FilesystemConfig{ {Src: pathSet.nixPath, Dst: "/nix", Write: true, Must: true}, @@ -76,7 +76,7 @@ func withCacheDir( Shell: shellPath, Sandbox: &fst.SandboxConfig{ Hostname: formatHostname(app.Name) + "-" + action, - Seccomp: seccomp.FlagMultiarch, + Seccomp: seccomp.FilterMultiarch, Tty: dropShell, Filesystem: []*fst.FilesystemConfig{ {Src: path.Join(workDir, "nix"), Dst: "/nix", Must: true}, |