diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-04-08 01:59:45 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-04-08 01:59:45 +0900 |
| commit | 584405f7ccd4c8c0e63762e113f4650f2abd469e (patch) | |
| tree | f72d79d1a90e9bffe8f5c975e564ad40c602f2f7 /internal/app | |
| parent | 50127ed5f9bc89f38c7d5d1aa06b4d99229b9c64 (diff) | |
sandbox/seccomp: rename flag type and constants
The names are ambiguous. Rename them to make more sense.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/app')
| -rw-r--r-- | internal/app/shim.go | 4 |
1 files changed, 1 insertions, 3 deletions
diff --git a/internal/app/shim.go b/internal/app/shim.go index ebc00aae..ea11dcc1 100644 --- a/internal/app/shim.go +++ b/internal/app/shim.go @@ -163,9 +163,7 @@ func ShimMain() { fmsg.PrintBaseError(err, "cannot configure container:") } - if err := seccomp.Load(seccomp.FlagExt | - seccomp.FlagDenyNS | seccomp.FlagDenyTTY | seccomp.FlagDenyDevel | - seccomp.FlagMultiarch); err != nil { + if err := seccomp.Load(seccomp.PresetCommon); err != nil { log.Fatalf("cannot load syscall filter: %v", err) } |