sandbox: resolve inverted flags in op

Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-03-21 12:58:38 +09:00
parent 632b18addd
commit a70daf2250
5 changed files with 95 additions and 89 deletions
--- a/sandbox/syscall.go
+++ b/sandbox/syscall.go
@@ -2,6 +2,12 @@ package sandbox

 import "syscall"

+const (
+	O_PATH              = 0x200000
+	PR_SET_NO_NEW_PRIVS = 0x26
+	CAP_SYS_ADMIN       = 0x15
+)
+
 const (
 	SUID_DUMP_DISABLE = iota
 	SUID_DUMP_USER