forked from security/hakurei
Ophestra
3ce63e95d7
This allows holding the bits without cgo. Signed-off-by: Ophestra <cat@gensokyo.uk>
21 lines
584 B
Go
21 lines
584 B
Go
package bits
|
|
|
|
// FilterPreset specifies parts of the syscall filter preset to enable.
|
|
type FilterPreset int
|
|
|
|
const (
|
|
// PresetExt are project-specific extensions.
|
|
PresetExt FilterPreset = 1 << iota
|
|
// PresetDenyNS denies namespace setup syscalls.
|
|
PresetDenyNS
|
|
// PresetDenyTTY denies faking input.
|
|
PresetDenyTTY
|
|
// PresetDenyDevel denies development-related syscalls.
|
|
PresetDenyDevel
|
|
// PresetLinux32 sets PER_LINUX32.
|
|
PresetLinux32
|
|
|
|
// PresetStrict is a strict preset useful as a default value.
|
|
PresetStrict = PresetExt | PresetDenyNS | PresetDenyTTY | PresetDenyDevel
|
|
)
|