diff options
Diffstat (limited to 'internal/pkg/exec.go')
| -rw-r--r-- | internal/pkg/exec.go | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/internal/pkg/exec.go b/internal/pkg/exec.go index 0c43cff0..f5270801 100644 --- a/internal/pkg/exec.go +++ b/internal/pkg/exec.go @@ -18,6 +18,7 @@ import ( "hakurei.app/container" "hakurei.app/container/check" "hakurei.app/container/fhs" + "hakurei.app/container/seccomp" "hakurei.app/container/std" "hakurei.app/message" ) @@ -302,6 +303,7 @@ func (a *execArtifact) cure(f *FContext, hostNet bool) (err error) { z := container.New(ctx, f.GetMessage()) z.WaitDelay = execWaitDelay z.SeccompPresets |= std.PresetStrict & ^std.PresetDenyNS + z.SeccompFlags |= seccomp.AllowMultiarch z.ParentPerm = 0700 z.HostNet = hostNet z.Hostname = "cure" |