diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-07-02 00:22:27 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-07-02 00:22:27 +0900 |
| commit | d5532aade0c3f042c5daa7d1c16e7cce2f4b524a (patch) | |
| tree | d34166a17ad57439edf1a59d5f54ecc605bd1ba4 /sandbox/seccomp/presets.go | |
| parent | 0c5409aec7455cbe9e34b0e4d2f0edf0bc3c6e37 (diff) | |
sandbox/seccomp: native rule slice in helpers
These helper functions took FilterPreset as input for ease of integration. This moves them to []NativeRule.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'sandbox/seccomp/presets.go')
| -rw-r--r-- | sandbox/seccomp/presets.go | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/sandbox/seccomp/presets.go b/sandbox/seccomp/presets.go index cb868644..c3b8f04c 100644 --- a/sandbox/seccomp/presets.go +++ b/sandbox/seccomp/presets.go @@ -21,7 +21,7 @@ const ( PresetLinux32 ) -func preparePreset(fd int, presets FilterPreset, flags PrepareFlag) error { +func Preset(presets FilterPreset, flags PrepareFlag) (rules []NativeRule) { allowedPersonality := PER_LINUX if presets&PresetLinux32 != 0 { allowedPersonality = PER_LINUX32 @@ -51,7 +51,7 @@ func preparePreset(fd int, presets FilterPreset, flags PrepareFlag) error { } } - rules := make([]NativeRule, 0, l) + rules = make([]NativeRule, 0, l) rules = append(rules, presetCommon...) if presets&PresetDenyNS != 0 { rules = append(rules, presetNamespace...) @@ -75,7 +75,7 @@ func preparePreset(fd int, presets FilterPreset, flags PrepareFlag) error { } } - return Prepare(fd, rules, flags) + return } var ( |