rosa/hakurei
6
3
Fork 2
Code Issues 10 Pull Requests 3 Actions 2 Packages Projects Releases 15 Wiki Activity

sandbox/seccomp: native rule slice in helpers
All checks were successful
Test / Create distribution (push) Successful in 32s
Details
Test / Sandbox (push) Successful in 2m6s
Details
Test / Hakurei (push) Successful in 2m49s
Details
Test / Sandbox (race detector) (push) Successful in 3m8s
Details
Test / Planterette (push) Successful in 3m33s
Details
Test / Hakurei (race detector) (push) Successful in 4m16s
Details
Test / Flake checks (push) Successful in 1m16s
Details

Browse Source 
These helper functions took FilterPreset as input for ease of integration. This moves them to []NativeRule.

Signed-off-by: Ophestra <cat@gensokyo.uk>
This commit is contained in:
Ophestra
2025-07-02 00:22:27 +09:00
parent 0c5409aec7
commit d5532aade0
6 changed files with 27 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
sandbox/seccomp/presets.go
View File

@@ -21,7 +21,7 @@ const (
PresetLinux32
)
func preparePreset(fd int, presets FilterPreset, flags PrepareFlag) error {
func Preset(presets FilterPreset, flags PrepareFlag) (rules []NativeRule) {
allowedPersonality := PER_LINUX
if presets&PresetLinux32 != 0 {
allowedPersonality = PER_LINUX32
@@ -51,7 +51,7 @@ func preparePreset(fd int, presets FilterPreset, flags PrepareFlag) error {
}
}
rules := make([]NativeRule, 0, l)
rules = make([]NativeRule, 0, l)
rules = append(rules, presetCommon...)
if presets&PresetDenyNS != 0 {
rules = append(rules, presetNamespace...)
@@ -75,7 +75,7 @@ func preparePreset(fd int, presets FilterPreset, flags PrepareFlag) error {
}
}
return Prepare(fd, rules, flags)
return
}
var (