From 3ce63e95d7691450f7b368e639d984a223a764b1 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Tue, 7 Oct 2025 18:28:20 +0900 Subject: container: move seccomp preset bits This allows holding the bits without cgo. Signed-off-by: Ophestra --- system/dbus/proc.go | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'system') diff --git a/system/dbus/proc.go b/system/dbus/proc.go index 24f8c40b..01e836da 100644 --- a/system/dbus/proc.go +++ b/system/dbus/proc.go @@ -9,6 +9,7 @@ import ( "syscall" "hakurei.app/container" + "hakurei.app/container/bits" "hakurei.app/container/seccomp" "hakurei.app/helper" "hakurei.app/ldd" @@ -63,7 +64,7 @@ func (p *Proxy) Start() error { p.final, true, argF, func(z *container.Container) { z.SeccompFlags |= seccomp.AllowMultiarch - z.SeccompPresets |= seccomp.PresetStrict + z.SeccompPresets |= bits.PresetStrict z.Hostname = "hakurei-dbus" if p.output != nil { z.Stdout, z.Stderr = p.output, p.output -- cgit v1.3.1