From 584405f7ccd4c8c0e63762e113f4650f2abd469e Mon Sep 17 00:00:00 2001 From: Ophestra Date: Tue, 8 Apr 2025 01:59:45 +0900 Subject: sandbox/seccomp: rename flag type and constants The names are ambiguous. Rename them to make more sense. Signed-off-by: Ophestra --- cmd/fpkg/app.go | 4 ++-- cmd/fpkg/with.go | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) (limited to 'cmd/fpkg') diff --git a/cmd/fpkg/app.go b/cmd/fpkg/app.go index e67ef112..c6ed60e6 100644 --- a/cmd/fpkg/app.go +++ b/cmd/fpkg/app.go @@ -111,10 +111,10 @@ func (app *appInfo) toFst(pathSet *appPathSet, argv []string, flagDropShell bool }, } if app.Multiarch { - config.Confinement.Sandbox.Seccomp |= seccomp.FlagMultiarch + config.Confinement.Sandbox.Seccomp |= seccomp.FilterMultiarch } if app.Bluetooth { - config.Confinement.Sandbox.Seccomp |= seccomp.FlagBluetooth + config.Confinement.Sandbox.Seccomp |= seccomp.FilterBluetooth } return config } diff --git a/cmd/fpkg/with.go b/cmd/fpkg/with.go index f9ffe848..92c5ba9e 100644 --- a/cmd/fpkg/with.go +++ b/cmd/fpkg/with.go @@ -39,7 +39,7 @@ func withNixDaemon( Hostname: formatHostname(app.Name) + "-" + action, Userns: true, // nix sandbox requires userns Net: net, - Seccomp: seccomp.FlagMultiarch, + Seccomp: seccomp.FilterMultiarch, Tty: dropShell, Filesystem: []*fst.FilesystemConfig{ {Src: pathSet.nixPath, Dst: "/nix", Write: true, Must: true}, @@ -76,7 +76,7 @@ func withCacheDir( Shell: shellPath, Sandbox: &fst.SandboxConfig{ Hostname: formatHostname(app.Name) + "-" + action, - Seccomp: seccomp.FlagMultiarch, + Seccomp: seccomp.FilterMultiarch, Tty: dropShell, Filesystem: []*fst.FilesystemConfig{ {Src: path.Join(workDir, "nix"), Dst: "/nix", Must: true}, -- cgit v1.3.1