From 584405f7ccd4c8c0e63762e113f4650f2abd469e Mon Sep 17 00:00:00 2001 From: Ophestra Date: Tue, 8 Apr 2025 01:59:45 +0900 Subject: sandbox/seccomp: rename flag type and constants The names are ambiguous. Rename them to make more sense. Signed-off-by: Ophestra --- internal/app/shim.go | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) (limited to 'internal') diff --git a/internal/app/shim.go b/internal/app/shim.go index ebc00aae..ea11dcc1 100644 --- a/internal/app/shim.go +++ b/internal/app/shim.go @@ -163,9 +163,7 @@ func ShimMain() { fmsg.PrintBaseError(err, "cannot configure container:") } - if err := seccomp.Load(seccomp.FlagExt | - seccomp.FlagDenyNS | seccomp.FlagDenyTTY | seccomp.FlagDenyDevel | - seccomp.FlagMultiarch); err != nil { + if err := seccomp.Load(seccomp.PresetCommon); err != nil { log.Fatalf("cannot load syscall filter: %v", err) } -- cgit v1.3.1