diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-07-02 00:22:27 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-07-02 00:22:27 +0900 |
| commit | d5532aade0c3f042c5daa7d1c16e7cce2f4b524a (patch) | |
| tree | d34166a17ad57439edf1a59d5f54ecc605bd1ba4 /internal | |
| parent | 0c5409aec7455cbe9e34b0e4d2f0edf0bc3c6e37 (diff) | |
sandbox/seccomp: native rule slice in helpers
These helper functions took FilterPreset as input for ease of integration. This moves them to []NativeRule.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal')
| -rw-r--r-- | internal/app/internal/setuid/shim.go | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/internal/app/internal/setuid/shim.go b/internal/app/internal/setuid/shim.go index 196fcfe9..100cf1cc 100644 --- a/internal/app/internal/setuid/shim.go +++ b/internal/app/internal/setuid/shim.go @@ -163,7 +163,10 @@ func ShimMain() { hlog.PrintBaseError(err, "cannot configure container:") } - if err := seccomp.Load(seccomp.PresetStrict, seccomp.AllowMultiarch); err != nil { + if err := seccomp.Load( + seccomp.Preset(seccomp.PresetStrict, seccomp.AllowMultiarch), + seccomp.AllowMultiarch, + ); err != nil { log.Fatalf("cannot load syscall filter: %v", err) } |