From 584405f7ccd4c8c0e63762e113f4650f2abd469e Mon Sep 17 00:00:00 2001 From: Ophestra Date: Tue, 8 Apr 2025 01:59:45 +0900 Subject: sandbox/seccomp: rename flag type and constants The names are ambiguous. Rename them to make more sense. Signed-off-by: Ophestra --- fst/config.go | 2 +- fst/sandbox.go | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) (limited to 'fst') diff --git a/fst/config.go b/fst/config.go index 48f74ebf..1a989e42 100644 --- a/fst/config.go +++ b/fst/config.go @@ -106,7 +106,7 @@ func Template() *Config { Userns: true, Net: true, Dev: true, - Seccomp: seccomp.FlagMultiarch, + Seccomp: seccomp.FilterMultiarch, Tty: true, Multiarch: true, MapRealUID: true, diff --git a/fst/sandbox.go b/fst/sandbox.go index 8bbc0769..716e303b 100644 --- a/fst/sandbox.go +++ b/fst/sandbox.go @@ -21,7 +21,7 @@ type ( Hostname string `json:"hostname,omitempty"` // extra seccomp flags - Seccomp seccomp.SyscallOpts `json:"seccomp"` + Seccomp seccomp.FilterOpts `json:"seccomp"` // allow ptrace and friends Devel bool `json:"devel,omitempty"` // allow userns creation in container @@ -98,7 +98,7 @@ func (s *SandboxConfig) ToContainer(sys SandboxSys, uid, gid *int) (*sandbox.Par } if s.Multiarch { - container.Seccomp |= seccomp.FlagMultiarch + container.Seccomp |= seccomp.FilterMultiarch } /* this is only 4 KiB of memory on a 64-bit system, -- cgit v1.3.1