diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-04-08 01:59:45 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-04-08 01:59:45 +0900 |
| commit | 584405f7ccd4c8c0e63762e113f4650f2abd469e (patch) | |
| tree | f72d79d1a90e9bffe8f5c975e564ad40c602f2f7 /fst | |
| parent | 50127ed5f9bc89f38c7d5d1aa06b4d99229b9c64 (diff) | |
sandbox/seccomp: rename flag type and constants
The names are ambiguous. Rename them to make more sense.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'fst')
| -rw-r--r-- | fst/config.go | 2 | ||||
| -rw-r--r-- | fst/sandbox.go | 4 |
2 files changed, 3 insertions, 3 deletions
diff --git a/fst/config.go b/fst/config.go index 48f74ebf..1a989e42 100644 --- a/fst/config.go +++ b/fst/config.go @@ -106,7 +106,7 @@ func Template() *Config { Userns: true, Net: true, Dev: true, - Seccomp: seccomp.FlagMultiarch, + Seccomp: seccomp.FilterMultiarch, Tty: true, Multiarch: true, MapRealUID: true, diff --git a/fst/sandbox.go b/fst/sandbox.go index 8bbc0769..716e303b 100644 --- a/fst/sandbox.go +++ b/fst/sandbox.go @@ -21,7 +21,7 @@ type ( Hostname string `json:"hostname,omitempty"` // extra seccomp flags - Seccomp seccomp.SyscallOpts `json:"seccomp"` + Seccomp seccomp.FilterOpts `json:"seccomp"` // allow ptrace and friends Devel bool `json:"devel,omitempty"` // allow userns creation in container @@ -98,7 +98,7 @@ func (s *SandboxConfig) ToContainer(sys SandboxSys, uid, gid *int) (*sandbox.Par } if s.Multiarch { - container.Seccomp |= seccomp.FlagMultiarch + container.Seccomp |= seccomp.FilterMultiarch } /* this is only 4 KiB of memory on a 64-bit system, |