diff options
| author | Ophestra <cat@gensokyo.uk> | 2026-02-16 01:46:28 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2026-02-16 01:46:28 +0900 |
| commit | 710b164c91424e1b96a21a0bbc3e0cbdbbe84c2d (patch) | |
| tree | a23524d003ddd30d4fe66c1c94d243b5ceb9df53 /internal/pkg/exec.go | |
| parent | 93911d60150ed55b8ec2afed75726779490ace12 (diff) | |
internal/pkg: allow devel syscalls
This is required by the GLib test suite, and possibly others.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/pkg/exec.go')
| -rw-r--r-- | internal/pkg/exec.go | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/internal/pkg/exec.go b/internal/pkg/exec.go index 39955637..bb0c7ba0 100644 --- a/internal/pkg/exec.go +++ b/internal/pkg/exec.go @@ -388,7 +388,8 @@ func (a *execArtifact) cure(f *FContext, hostNet bool) (err error) { z := container.New(ctx, f.GetMessage()) z.WaitDelay = execWaitDelay - z.SeccompPresets |= std.PresetStrict & ^std.PresetDenyNS + z.SeccompPresets |= std.PresetStrict & + ^(std.PresetDenyNS | std.PresetDenyDevel) z.SeccompFlags |= seccomp.AllowMultiarch z.ParentPerm = 0700 z.HostNet = hostNet |