From becaf8b6d7151971907ff65f338afa038f021c92 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Wed, 5 Nov 2025 04:48:05 +0900 Subject: std: relocate seccomp lookup tables This should enable resolving NativeRule in hst. Signed-off-by: Ophestra --- container/seccomp/presets.go | 26 +++++++++++++------------- 1 file changed, 13 insertions(+), 13 deletions(-) (limited to 'container/seccomp/presets.go') diff --git a/container/seccomp/presets.go b/container/seccomp/presets.go index 8e9eaeb6..f16bc82c 100644 --- a/container/seccomp/presets.go +++ b/container/seccomp/presets.go @@ -5,32 +5,32 @@ package seccomp import ( . "syscall" - "hakurei.app/container/std" + . "hakurei.app/container/std" ) -func Preset(presets std.FilterPreset, flags ExportFlag) (rules []NativeRule) { +func Preset(presets FilterPreset, flags ExportFlag) (rules []NativeRule) { allowedPersonality := PersonaLinux - if presets&std.PresetLinux32 != 0 { + if presets&PresetLinux32 != 0 { allowedPersonality = PersonaLinux32 } presetDevelFinal := presetDevel(ScmpDatum(allowedPersonality)) l := len(presetCommon) - if presets&std.PresetDenyNS != 0 { + if presets&PresetDenyNS != 0 { l += len(presetNamespace) } - if presets&std.PresetDenyTTY != 0 { + if presets&PresetDenyTTY != 0 { l += len(presetTTY) } - if presets&std.PresetDenyDevel != 0 { + if presets&PresetDenyDevel != 0 { l += len(presetDevelFinal) } if flags&AllowMultiarch == 0 { l += len(presetEmu) } - if presets&std.PresetExt != 0 { + if presets&PresetExt != 0 { l += len(presetCommonExt) - if presets&std.PresetDenyNS != 0 { + if presets&PresetDenyNS != 0 { l += len(presetNamespaceExt) } if flags&AllowMultiarch == 0 { @@ -40,21 +40,21 @@ func Preset(presets std.FilterPreset, flags ExportFlag) (rules []NativeRule) { rules = make([]NativeRule, 0, l) rules = append(rules, presetCommon...) - if presets&std.PresetDenyNS != 0 { + if presets&PresetDenyNS != 0 { rules = append(rules, presetNamespace...) } - if presets&std.PresetDenyTTY != 0 { + if presets&PresetDenyTTY != 0 { rules = append(rules, presetTTY...) } - if presets&std.PresetDenyDevel != 0 { + if presets&PresetDenyDevel != 0 { rules = append(rules, presetDevelFinal...) } if flags&AllowMultiarch == 0 { rules = append(rules, presetEmu...) } - if presets&std.PresetExt != 0 { + if presets&PresetExt != 0 { rules = append(rules, presetCommonExt...) - if presets&std.PresetDenyNS != 0 { + if presets&PresetDenyNS != 0 { rules = append(rules, presetNamespaceExt...) } if flags&AllowMultiarch == 0 { -- cgit v1.3.1