security/hakurei
6
3
Fork 1
Code Issues 11 Pull Requests 1 Actions 1 Packages Projects Releases 13 Wiki Activity

internal/pkg: allow devel syscalls
All checks were successful
Test / Create distribution (push) Successful in 1m0s
Details
Test / Sandbox (push) Successful in 2m47s
Details
Test / Hakurei (push) Successful in 4m0s
Details
Test / ShareFS (push) Successful in 4m1s
Details
Test / Hpkg (push) Successful in 4m30s
Details
Test / Sandbox (race detector) (push) Successful in 5m9s
Details
Test / Hakurei (race detector) (push) Successful in 6m12s
Details
Test / Flake checks (push) Successful in 1m58s
Details

Browse Source 
This is required by the GLib test suite, and possibly others.

Signed-off-by: Ophestra <cat@gensokyo.uk>
This commit is contained in:
Ophestra
2026-02-16 01:46:28 +09:00
parent 93911d6015
commit 710b164c91
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
internal/pkg/exec.go
View File

@@ -388,7 +388,8 @@ func (a *execArtifact) cure(f *FContext, hostNet bool) (err error) {
z := container.New(ctx, f.GetMessage()) z := container.New(ctx, f.GetMessage())
z.WaitDelay = execWaitDelay z.WaitDelay = execWaitDelay
z.SeccompPresets |= std.PresetStrict & ^std.PresetDenyNS z.SeccompPresets |= std.PresetStrict &
^(std.PresetDenyNS | std.PresetDenyDevel)
z.SeccompFlags |= seccomp.AllowMultiarch z.SeccompFlags |= seccomp.AllowMultiarch
z.ParentPerm = 0700 z.ParentPerm = 0700
z.HostNet = hostNet z.HostNet = hostNet