diff options
| author | Ophestra <cat@gensokyo.uk> | 2026-04-10 23:45:51 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2026-04-10 23:45:51 +0900 |
| commit | ad2c9f36cddfd8adcd06fbe9238d176a8eb89614 (patch) | |
| tree | 2e400cc460b9f6233910fa0999e1fab00eb82946 /container/syscall.go | |
| parent | 67db3fbb8d7ba95071e50c43e96a0dd79e55a476 (diff) | |
container: unexport PR_SET_NO_NEW_PRIVS wrapper
This is subtle to use correctly. It also does not make sense as part of the container API.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'container/syscall.go')
| -rw-r--r-- | container/syscall.go | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/container/syscall.go b/container/syscall.go index c71e298c..e008ecea 100644 --- a/container/syscall.go +++ b/container/syscall.go @@ -7,8 +7,8 @@ import ( "hakurei.app/ext" ) -// SetNoNewPrivs sets the calling thread's no_new_privs attribute. -func SetNoNewPrivs() error { +// setNoNewPrivs sets the calling thread's no_new_privs attribute. +func setNoNewPrivs() error { return ext.Prctl(PR_SET_NO_NEW_PRIVS, 1, 0) } |