diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-04-08 01:59:45 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-04-08 01:59:45 +0900 |
| commit | 584405f7ccd4c8c0e63762e113f4650f2abd469e (patch) | |
| tree | f72d79d1a90e9bffe8f5c975e564ad40c602f2f7 /sandbox/container.go | |
| parent | 50127ed5f9bc89f38c7d5d1aa06b4d99229b9c64 (diff) | |
sandbox/seccomp: rename flag type and constants
The names are ambiguous. Rename them to make more sense.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'sandbox/container.go')
| -rw-r--r-- | sandbox/container.go | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/sandbox/container.go b/sandbox/container.go index 7bbdf25c..eb8b7348 100644 --- a/sandbox/container.go +++ b/sandbox/container.go @@ -27,18 +27,18 @@ const ( FAllowNet ) -func (flags HardeningFlags) seccomp(opts seccomp.SyscallOpts) seccomp.SyscallOpts { +func (flags HardeningFlags) seccomp(opts seccomp.FilterOpts) seccomp.FilterOpts { if flags&FSyscallCompat == 0 { - opts |= seccomp.FlagExt + opts |= seccomp.FilterExt } if flags&FAllowDevel == 0 { - opts |= seccomp.FlagDenyDevel + opts |= seccomp.FilterDenyDevel } if flags&FAllowUserns == 0 { - opts |= seccomp.FlagDenyNS + opts |= seccomp.FilterDenyNS } if flags&FAllowTTY == 0 { - opts |= seccomp.FlagDenyTTY + opts |= seccomp.FilterDenyTTY } return opts } @@ -95,7 +95,7 @@ type ( // Sequential container setup ops. *Ops // Extra seccomp options. - Seccomp seccomp.SyscallOpts + Seccomp seccomp.FilterOpts // Permission bits of newly created parent directories. // The zero value is interpreted as 0755. ParentPerm os.FileMode |
