From e94acc424c5746eb6cf903ed97b4e71223fda50f Mon Sep 17 00:00:00 2001 From: Ophestra Date: Tue, 21 Oct 2025 20:54:03 +0900 Subject: container/comp: rename from bits This package will also hold syscall lookup tables for seccomp. Signed-off-by: Ophestra --- container/bits/bits.go | 13 ------------- container/bits/seccomp.go | 20 -------------------- 2 files changed, 33 deletions(-) delete mode 100644 container/bits/bits.go delete mode 100644 container/bits/seccomp.go (limited to 'container/bits') diff --git a/container/bits/bits.go b/container/bits/bits.go deleted file mode 100644 index 7aa2e448..00000000 --- a/container/bits/bits.go +++ /dev/null @@ -1,13 +0,0 @@ -// Package bits contains constants for configuring the container. -package bits - -const ( - // BindOptional skips nonexistent host paths. - BindOptional = 1 << iota - // BindWritable mounts filesystem read-write. - BindWritable - // BindDevice allows access to devices (special files) on this filesystem. - BindDevice - // BindEnsure attempts to create the host path if it does not exist. - BindEnsure -) diff --git a/container/bits/seccomp.go b/container/bits/seccomp.go deleted file mode 100644 index 57e3e122..00000000 --- a/container/bits/seccomp.go +++ /dev/null @@ -1,20 +0,0 @@ -package bits - -// FilterPreset specifies parts of the syscall filter preset to enable. -type FilterPreset int - -const ( - // PresetExt are project-specific extensions. - PresetExt FilterPreset = 1 << iota - // PresetDenyNS denies namespace setup syscalls. - PresetDenyNS - // PresetDenyTTY denies faking input. - PresetDenyTTY - // PresetDenyDevel denies development-related syscalls. - PresetDenyDevel - // PresetLinux32 sets PER_LINUX32. - PresetLinux32 - - // PresetStrict is a strict preset useful as a default value. - PresetStrict = PresetExt | PresetDenyNS | PresetDenyTTY | PresetDenyDevel -) -- cgit v1.3.1