From 3ce63e95d7691450f7b368e639d984a223a764b1 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Tue, 7 Oct 2025 18:28:20 +0900 Subject: container: move seccomp preset bits This allows holding the bits without cgo. Signed-off-by: Ophestra --- ldd/exec.go | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'ldd') diff --git a/ldd/exec.go b/ldd/exec.go index bdd8fa9e..b562316a 100644 --- a/ldd/exec.go +++ b/ldd/exec.go @@ -9,6 +9,7 @@ import ( "time" "hakurei.app/container" + "hakurei.app/container/bits" "hakurei.app/container/seccomp" ) @@ -36,7 +37,7 @@ func Exec(ctx context.Context, msg container.Msg, p string) ([]*Entry, error) { z := container.NewCommand(c, msg, toolPath, lddName, p) z.Hostname = "hakurei-" + lddName z.SeccompFlags |= seccomp.AllowMultiarch - z.SeccompPresets |= seccomp.PresetStrict + z.SeccompPresets |= bits.PresetStrict stdout, stderr := new(bytes.Buffer), new(bytes.Buffer) z.Stdout = stdout z.Stderr = stderr -- cgit v1.3.1