From 31aef905fa819310ee7694775a836c294ff742e4 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Wed, 2 Jul 2025 04:38:28 +0900 Subject: sandbox: expose seccomp interface There's no point in artificially limiting and abstracting away these options. The higher level hakurei package is responsible for providing a secure baseline and sane defaults. The sandbox package should present everything to the caller. Signed-off-by: Ophestra --- sandbox/ops.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'sandbox/ops.go') diff --git a/sandbox/ops.go b/sandbox/ops.go index 5226c7ad..016b2657 100644 --- a/sandbox/ops.go +++ b/sandbox/ops.go @@ -205,7 +205,7 @@ func (d MountDevOp) apply(params *Params) error { fmt.Sprintf("cannot mount devpts on %q:", devPtsPath)) } - if params.Flags&FAllowTTY != 0 { + if params.RetainSession { var buf [8]byte if _, _, errno := Syscall(SYS_IOCTL, 1, TIOCGWINSZ, uintptr(unsafe.Pointer(&buf[0]))); errno == 0 { consolePath := toSysroot(path.Join(v, "console")) -- cgit v1.3.1