aboutsummaryrefslogtreecommitdiffhomepage
path: root/container/container.go
diff options
context:
space:
mode:
authorOphestra <cat@gensokyo.uk>2026-04-10 23:45:51 +0900
committerOphestra <cat@gensokyo.uk>2026-04-10 23:45:51 +0900
commitad2c9f36cddfd8adcd06fbe9238d176a8eb89614 (patch)
tree2e400cc460b9f6233910fa0999e1fab00eb82946 /container/container.go
parent67db3fbb8d7ba95071e50c43e96a0dd79e55a476 (diff)
container: unexport PR_SET_NO_NEW_PRIVS wrapper
This is subtle to use correctly. It also does not make sense as part of the container API. Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'container/container.go')
-rw-r--r--container/container.go2
1 files changed, 1 insertions, 1 deletions
diff --git a/container/container.go b/container/container.go
index 75d225a1..aeea3dcc 100644
--- a/container/container.go
+++ b/container/container.go
@@ -307,7 +307,7 @@ func (p *Container) Start() error {
done <- func() error {
// PR_SET_NO_NEW_PRIVS: thread-directed but acts on all processes
// created from the calling thread
- if err := SetNoNewPrivs(); err != nil {
+ if err := setNoNewPrivs(); err != nil {
return &StartError{
Fatal: true,
Step: "prctl(PR_SET_NO_NEW_PRIVS)",