diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-11-05 04:48:05 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-11-05 04:48:05 +0900 |
| commit | becaf8b6d7151971907ff65f338afa038f021c92 (patch) | |
| tree | 4130439807baa92b11d85ad1199d0f2f5e27f001 /container/landlock.go | |
| parent | 54c0d6bf48fdfade3aaf7741ec3d3cbc302c8b82 (diff) | |
std: relocate seccomp lookup tables
This should enable resolving NativeRule in hst.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'container/landlock.go')
| -rw-r--r-- | container/landlock.go | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/container/landlock.go b/container/landlock.go index 7f7461e2..63d03817 100644 --- a/container/landlock.go +++ b/container/landlock.go @@ -5,7 +5,7 @@ import ( "syscall" "unsafe" - "hakurei.app/container/seccomp" + "hakurei.app/container/std" ) // include/uapi/linux/landlock.h @@ -212,7 +212,7 @@ func (rulesetAttr *RulesetAttr) Create(flags uintptr) (fd int, err error) { size = unsafe.Sizeof(*rulesetAttr) } - rulesetFd, _, errno := syscall.Syscall(seccomp.SYS_LANDLOCK_CREATE_RULESET, pointer, size, flags) + rulesetFd, _, errno := syscall.Syscall(std.SYS_LANDLOCK_CREATE_RULESET, pointer, size, flags) fd = int(rulesetFd) err = errno @@ -231,7 +231,7 @@ func LandlockGetABI() (int, error) { } func LandlockRestrictSelf(rulesetFd int, flags uintptr) error { - r, _, errno := syscall.Syscall(seccomp.SYS_LANDLOCK_RESTRICT_SELF, uintptr(rulesetFd), flags, 0) + r, _, errno := syscall.Syscall(std.SYS_LANDLOCK_RESTRICT_SELF, uintptr(rulesetFd), flags, 0) if r != 0 { return errno } |
