From ad2c9f36cddfd8adcd06fbe9238d176a8eb89614 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Fri, 10 Apr 2026 23:45:51 +0900 Subject: container: unexport PR_SET_NO_NEW_PRIVS wrapper This is subtle to use correctly. It also does not make sense as part of the container API. Signed-off-by: Ophestra --- container/syscall.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'container/syscall.go') diff --git a/container/syscall.go b/container/syscall.go index c71e298c..e008ecea 100644 --- a/container/syscall.go +++ b/container/syscall.go @@ -7,8 +7,8 @@ import ( "hakurei.app/ext" ) -// SetNoNewPrivs sets the calling thread's no_new_privs attribute. -func SetNoNewPrivs() error { +// setNoNewPrivs sets the calling thread's no_new_privs attribute. +func setNoNewPrivs() error { return ext.Prctl(PR_SET_NO_NEW_PRIVS, 1, 0) } -- cgit v1.3.1