From d5532aade0c3f042c5daa7d1c16e7cce2f4b524a Mon Sep 17 00:00:00 2001 From: Ophestra Date: Wed, 2 Jul 2025 00:22:27 +0900 Subject: sandbox/seccomp: native rule slice in helpers These helper functions took FilterPreset as input for ease of integration. This moves them to []NativeRule. Signed-off-by: Ophestra --- sandbox/init.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'sandbox/init.go') diff --git a/sandbox/init.go b/sandbox/init.go index 9828adaf..4fcdd9cb 100644 --- a/sandbox/init.go +++ b/sandbox/init.go @@ -237,7 +237,7 @@ func Init(prepare func(prefix string), setVerbose func(verbose bool)) { log.Fatalf("cannot capset: %v", err) } - if err := seccomp.Load(params.Flags.seccomp(params.SeccompPresets), params.SeccompFlags); err != nil { + if err := seccomp.Load(seccomp.Preset(params.Flags.seccomp(params.SeccompPresets), params.SeccompFlags), params.SeccompFlags); err != nil { log.Fatalf("cannot load syscall filter: %v", err) } -- cgit v1.3.1