aboutsummaryrefslogtreecommitdiffhomepage
path: root/sandbox/container.go
diff options
context:
space:
mode:
authorOphestra <cat@gensokyo.uk>2025-04-08 01:59:45 +0900
committerOphestra <cat@gensokyo.uk>2025-04-08 01:59:45 +0900
commit584405f7ccd4c8c0e63762e113f4650f2abd469e (patch)
treef72d79d1a90e9bffe8f5c975e564ad40c602f2f7 /sandbox/container.go
parent50127ed5f9bc89f38c7d5d1aa06b4d99229b9c64 (diff)
sandbox/seccomp: rename flag type and constants
The names are ambiguous. Rename them to make more sense. Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'sandbox/container.go')
-rw-r--r--sandbox/container.go12
1 files changed, 6 insertions, 6 deletions
diff --git a/sandbox/container.go b/sandbox/container.go
index 7bbdf25c..eb8b7348 100644
--- a/sandbox/container.go
+++ b/sandbox/container.go
@@ -27,18 +27,18 @@ const (
FAllowNet
)
-func (flags HardeningFlags) seccomp(opts seccomp.SyscallOpts) seccomp.SyscallOpts {
+func (flags HardeningFlags) seccomp(opts seccomp.FilterOpts) seccomp.FilterOpts {
if flags&FSyscallCompat == 0 {
- opts |= seccomp.FlagExt
+ opts |= seccomp.FilterExt
}
if flags&FAllowDevel == 0 {
- opts |= seccomp.FlagDenyDevel
+ opts |= seccomp.FilterDenyDevel
}
if flags&FAllowUserns == 0 {
- opts |= seccomp.FlagDenyNS
+ opts |= seccomp.FilterDenyNS
}
if flags&FAllowTTY == 0 {
- opts |= seccomp.FlagDenyTTY
+ opts |= seccomp.FilterDenyTTY
}
return opts
}
@@ -95,7 +95,7 @@ type (
// Sequential container setup ops.
*Ops
// Extra seccomp options.
- Seccomp seccomp.SyscallOpts
+ Seccomp seccomp.FilterOpts
// Permission bits of newly created parent directories.
// The zero value is interpreted as 0755.
ParentPerm os.FileMode