From 9b1a60b5c9f7a92abb632639117d61c5cbaf74f7 Mon Sep 17 00:00:00 2001
From: Ophestra <cat@gensokyo.uk>
Date: Thu, 13 Mar 2025 20:59:03 +0900
Subject: sandbox: native container tooling

This should eventually replace bwrap.

Signed-off-by: Ophestra <cat@gensokyo.uk>
---
 internal/sandbox/const.go | 6 ++++++
 1 file changed, 6 insertions(+)
 create mode 100644 internal/sandbox/const.go

(limited to 'internal/sandbox/const.go')

diff --git a/internal/sandbox/const.go b/internal/sandbox/const.go
new file mode 100644
index 00000000..afced969
--- /dev/null
+++ b/internal/sandbox/const.go
@@ -0,0 +1,6 @@
+package sandbox
+
+const (
+	PR_SET_NO_NEW_PRIVS = 0x26
+	CAP_SYS_ADMIN       = 0x15
+)
-- 
cgit v1.3.1