diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-11-05 02:47:43 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-11-05 02:47:43 +0900 |
| commit | c1399f5030abde76728ba7982a7a22fd49e75359 (patch) | |
| tree | 06e2a2ce11dbd7536150fd57824e406f101d50d9 /container/comp | |
| parent | 9ac63aac0cb025d1de195dbc57d0c89ebd1d7cc5 (diff) | |
std: rename from comp
Seccomp lookup tables are going to be relocated here, and PNR constants.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'container/comp')
| -rw-r--r-- | container/comp/bits.go | 32 |
1 files changed, 0 insertions, 32 deletions
diff --git a/container/comp/bits.go b/container/comp/bits.go deleted file mode 100644 index d0993444..00000000 --- a/container/comp/bits.go +++ /dev/null @@ -1,32 +0,0 @@ -// Package comp contains constants from container packages without depending on cgo. -package comp - -const ( - // BindOptional skips nonexistent host paths. - BindOptional = 1 << iota - // BindWritable mounts filesystem read-write. - BindWritable - // BindDevice allows access to devices (special files) on this filesystem. - BindDevice - // BindEnsure attempts to create the host path if it does not exist. - BindEnsure -) - -// FilterPreset specifies parts of the syscall filter preset to enable. -type FilterPreset int - -const ( - // PresetExt are project-specific extensions. - PresetExt FilterPreset = 1 << iota - // PresetDenyNS denies namespace setup syscalls. - PresetDenyNS - // PresetDenyTTY denies faking input. - PresetDenyTTY - // PresetDenyDevel denies development-related syscalls. - PresetDenyDevel - // PresetLinux32 sets PER_LINUX32. - PresetLinux32 - - // PresetStrict is a strict preset useful as a default value. - PresetStrict = PresetExt | PresetDenyNS | PresetDenyTTY | PresetDenyDevel -) |