From ad2c9f36cddfd8adcd06fbe9238d176a8eb89614 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Fri, 10 Apr 2026 23:45:51 +0900 Subject: container: unexport PR_SET_NO_NEW_PRIVS wrapper This is subtle to use correctly. It also does not make sense as part of the container API. Signed-off-by: Ophestra --- container/container.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'container/container.go') diff --git a/container/container.go b/container/container.go index 75d225a1..aeea3dcc 100644 --- a/container/container.go +++ b/container/container.go @@ -307,7 +307,7 @@ func (p *Container) Start() error { done <- func() error { // PR_SET_NO_NEW_PRIVS: thread-directed but acts on all processes // created from the calling thread - if err := SetNoNewPrivs(); err != nil { + if err := setNoNewPrivs(); err != nil { return &StartError{ Fatal: true, Step: "prctl(PR_SET_NO_NEW_PRIVS)", -- cgit v1.3.1