diff --git a/internal/pkg/exec.go b/internal/pkg/exec.go index 0c43cff..f527080 100644 --- a/internal/pkg/exec.go +++ b/internal/pkg/exec.go @@ -18,6 +18,7 @@ import ( "hakurei.app/container" "hakurei.app/container/check" "hakurei.app/container/fhs" + "hakurei.app/container/seccomp" "hakurei.app/container/std" "hakurei.app/message" ) @@ -302,6 +303,7 @@ func (a *execArtifact) cure(f *FContext, hostNet bool) (err error) { z := container.New(ctx, f.GetMessage()) z.WaitDelay = execWaitDelay z.SeccompPresets |= std.PresetStrict & ^std.PresetDenyNS + z.SeccompFlags |= seccomp.AllowMultiarch z.ParentPerm = 0700 z.HostNet = hostNet z.Hostname = "cure"