diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-01-22 01:51:10 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-01-22 01:52:57 +0900 |
| commit | 9a239fa1a5ad2ff248ca7a9d39342f66926c9fef (patch) | |
| tree | 09efadb2ddf4eaeaf153d7e4b7d73e1b20d2fc1a /helper/bwrap/config.go | |
| parent | 82029948e6d8d047edc02ccff354e16c419e5742 (diff) | |
helper/bwrap: integrate seccomp into helper interface
This makes API usage much cleaner, and encapsulates all bwrap arguments in argsWt.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'helper/bwrap/config.go')
| -rw-r--r-- | helper/bwrap/config.go | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/helper/bwrap/config.go b/helper/bwrap/config.go index 8def27a6..b9fa0c12 100644 --- a/helper/bwrap/config.go +++ b/helper/bwrap/config.go @@ -47,6 +47,10 @@ type Config struct { // (--chmod OCTAL PATH) Chmod ChmodConfig `json:"chmod,omitempty"` + // load and use seccomp rules from FD (not repeatable) + // (--seccomp FD) + Syscall *SyscallPolicy + // create a new terminal session // (--new-session) NewSession bool `json:"new_session"` @@ -70,7 +74,6 @@ type Config struct { --file FD DEST Copy from FD to destination DEST --bind-data FD DEST Copy from FD to file which is bind-mounted on DEST --ro-bind-data FD DEST Copy from FD to file which is readonly bind-mounted on DEST - --seccomp FD Load and use seccomp rules from FD (not repeatable) --add-seccomp-fd FD Load and use seccomp rules from FD (repeatable) --block-fd FD Block on FD until some data to read is available --userns-block-fd FD Block on FD until the user namespace is ready |