diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-10-21 20:54:03 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-10-21 20:54:03 +0900 |
| commit | e94acc424c5746eb6cf903ed97b4e71223fda50f (patch) | |
| tree | c55f4b467ed11149006a799421936845bf64de99 /container/bits | |
| parent | b1a4d801be033b41c559e9642ee05e2f0ec43d5b (diff) | |
container/comp: rename from bits
This package will also hold syscall lookup tables for seccomp.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'container/bits')
| -rw-r--r-- | container/bits/bits.go | 13 | ||||
| -rw-r--r-- | container/bits/seccomp.go | 20 |
2 files changed, 0 insertions, 33 deletions
diff --git a/container/bits/bits.go b/container/bits/bits.go deleted file mode 100644 index 7aa2e448..00000000 --- a/container/bits/bits.go +++ /dev/null @@ -1,13 +0,0 @@ -// Package bits contains constants for configuring the container. -package bits - -const ( - // BindOptional skips nonexistent host paths. - BindOptional = 1 << iota - // BindWritable mounts filesystem read-write. - BindWritable - // BindDevice allows access to devices (special files) on this filesystem. - BindDevice - // BindEnsure attempts to create the host path if it does not exist. - BindEnsure -) diff --git a/container/bits/seccomp.go b/container/bits/seccomp.go deleted file mode 100644 index 57e3e122..00000000 --- a/container/bits/seccomp.go +++ /dev/null @@ -1,20 +0,0 @@ -package bits - -// FilterPreset specifies parts of the syscall filter preset to enable. -type FilterPreset int - -const ( - // PresetExt are project-specific extensions. - PresetExt FilterPreset = 1 << iota - // PresetDenyNS denies namespace setup syscalls. - PresetDenyNS - // PresetDenyTTY denies faking input. - PresetDenyTTY - // PresetDenyDevel denies development-related syscalls. - PresetDenyDevel - // PresetLinux32 sets PER_LINUX32. - PresetLinux32 - - // PresetStrict is a strict preset useful as a default value. - PresetStrict = PresetExt | PresetDenyNS | PresetDenyTTY | PresetDenyDevel -) |