diff options
Diffstat (limited to 'cmd')
| -rw-r--r-- | cmd/fpkg/app.go | 4 | ||||
| -rw-r--r-- | cmd/fpkg/with.go | 4 |
2 files changed, 4 insertions, 4 deletions
diff --git a/cmd/fpkg/app.go b/cmd/fpkg/app.go index e67ef112..c6ed60e6 100644 --- a/cmd/fpkg/app.go +++ b/cmd/fpkg/app.go @@ -111,10 +111,10 @@ func (app *appInfo) toFst(pathSet *appPathSet, argv []string, flagDropShell bool }, } if app.Multiarch { - config.Confinement.Sandbox.Seccomp |= seccomp.FlagMultiarch + config.Confinement.Sandbox.Seccomp |= seccomp.FilterMultiarch } if app.Bluetooth { - config.Confinement.Sandbox.Seccomp |= seccomp.FlagBluetooth + config.Confinement.Sandbox.Seccomp |= seccomp.FilterBluetooth } return config } diff --git a/cmd/fpkg/with.go b/cmd/fpkg/with.go index f9ffe848..92c5ba9e 100644 --- a/cmd/fpkg/with.go +++ b/cmd/fpkg/with.go @@ -39,7 +39,7 @@ func withNixDaemon( Hostname: formatHostname(app.Name) + "-" + action, Userns: true, // nix sandbox requires userns Net: net, - Seccomp: seccomp.FlagMultiarch, + Seccomp: seccomp.FilterMultiarch, Tty: dropShell, Filesystem: []*fst.FilesystemConfig{ {Src: pathSet.nixPath, Dst: "/nix", Write: true, Must: true}, @@ -76,7 +76,7 @@ func withCacheDir( Shell: shellPath, Sandbox: &fst.SandboxConfig{ Hostname: formatHostname(app.Name) + "-" + action, - Seccomp: seccomp.FlagMultiarch, + Seccomp: seccomp.FilterMultiarch, Tty: dropShell, Filesystem: []*fst.FilesystemConfig{ {Src: path.Join(workDir, "nix"), Dst: "/nix", Must: true}, |