From becaf8b6d7151971907ff65f338afa038f021c92 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Wed, 5 Nov 2025 04:48:05 +0900 Subject: std: relocate seccomp lookup tables This should enable resolving NativeRule in hst. Signed-off-by: Ophestra --- container/landlock.go | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'container/landlock.go') diff --git a/container/landlock.go b/container/landlock.go index 7f7461e2..63d03817 100644 --- a/container/landlock.go +++ b/container/landlock.go @@ -5,7 +5,7 @@ import ( "syscall" "unsafe" - "hakurei.app/container/seccomp" + "hakurei.app/container/std" ) // include/uapi/linux/landlock.h @@ -212,7 +212,7 @@ func (rulesetAttr *RulesetAttr) Create(flags uintptr) (fd int, err error) { size = unsafe.Sizeof(*rulesetAttr) } - rulesetFd, _, errno := syscall.Syscall(seccomp.SYS_LANDLOCK_CREATE_RULESET, pointer, size, flags) + rulesetFd, _, errno := syscall.Syscall(std.SYS_LANDLOCK_CREATE_RULESET, pointer, size, flags) fd = int(rulesetFd) err = errno @@ -231,7 +231,7 @@ func LandlockGetABI() (int, error) { } func LandlockRestrictSelf(rulesetFd int, flags uintptr) error { - r, _, errno := syscall.Syscall(seccomp.SYS_LANDLOCK_RESTRICT_SELF, uintptr(rulesetFd), flags, 0) + r, _, errno := syscall.Syscall(std.SYS_LANDLOCK_RESTRICT_SELF, uintptr(rulesetFd), flags, 0) if r != 0 { return errno } -- cgit v1.3.1