From 1a8840bebc673672235b6e10b1b9386f24751757 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Tue, 1 Jul 2025 20:23:33 +0900 Subject: sandbox/seccomp: resolve rules natively This enables loading syscall filter policies from external cross-platform config files. This also removes a significant amount of C code. Signed-off-by: Ophestra --- hst/container.go | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'hst/container.go') diff --git a/hst/container.go b/hst/container.go index 796b82e8..32ddef2e 100644 --- a/hst/container.go +++ b/hst/container.go @@ -11,7 +11,9 @@ type ( Hostname string `json:"hostname,omitempty"` // extra seccomp flags - Seccomp seccomp.FilterOpts `json:"seccomp"` + SeccompFlags seccomp.PrepareFlag `json:"seccomp_flags"` + // extra seccomp presets + SeccompPresets seccomp.FilterPreset `json:"seccomp_presets"` // allow ptrace and friends Devel bool `json:"devel,omitempty"` // allow userns creation in container -- cgit v1.3.1