From 584405f7ccd4c8c0e63762e113f4650f2abd469e Mon Sep 17 00:00:00 2001 From: Ophestra Date: Tue, 8 Apr 2025 01:59:45 +0900 Subject: sandbox/seccomp: rename flag type and constants The names are ambiguous. Rename them to make more sense. Signed-off-by: Ophestra --- sandbox/container.go | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) (limited to 'sandbox/container.go') diff --git a/sandbox/container.go b/sandbox/container.go index 7bbdf25c..eb8b7348 100644 --- a/sandbox/container.go +++ b/sandbox/container.go @@ -27,18 +27,18 @@ const ( FAllowNet ) -func (flags HardeningFlags) seccomp(opts seccomp.SyscallOpts) seccomp.SyscallOpts { +func (flags HardeningFlags) seccomp(opts seccomp.FilterOpts) seccomp.FilterOpts { if flags&FSyscallCompat == 0 { - opts |= seccomp.FlagExt + opts |= seccomp.FilterExt } if flags&FAllowDevel == 0 { - opts |= seccomp.FlagDenyDevel + opts |= seccomp.FilterDenyDevel } if flags&FAllowUserns == 0 { - opts |= seccomp.FlagDenyNS + opts |= seccomp.FilterDenyNS } if flags&FAllowTTY == 0 { - opts |= seccomp.FlagDenyTTY + opts |= seccomp.FilterDenyTTY } return opts } @@ -95,7 +95,7 @@ type ( // Sequential container setup ops. *Ops // Extra seccomp options. - Seccomp seccomp.SyscallOpts + Seccomp seccomp.FilterOpts // Permission bits of newly created parent directories. // The zero value is interpreted as 0755. ParentPerm os.FileMode -- cgit v1.3.1