|
|
7b96cd6ded
|
helper/seccomp: do not call F_println if not verbose
Test / Create distribution (push) Successful in 1m42s
Test / Run NixOS test (push) Successful in 3m34s
This (slightly) improves performance.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
2025-01-25 13:19:38 +09:00 |
|
|
|
163f15e93f
|
helper/seccomp: separate seccomp package
Test / Create distribution (push) Successful in 1m39s
Test / Run NixOS test (push) Successful in 3m31s
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
2025-01-25 12:59:11 +09:00 |
|
|
|
37780456a7
|
helper: block more unusual/privileged syscalls
Test / Create distribution (push) Successful in 1m44s
Test / Run NixOS test (push) Successful in 3m35s
These are toggled by F_EXT and exposed as SyscallPolicy.Compat in the Go interface.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
2025-01-25 12:35:47 +09:00 |
|
|
|
9a239fa1a5
|
helper/bwrap: integrate seccomp into helper interface
Build / Create distribution (push) Successful in 1m36s
Test / Run NixOS test (push) Successful in 3m40s
This makes API usage much cleaner, and encapsulates all bwrap arguments in argsWt.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
2025-01-22 01:52:57 +09:00 |
|
