hakurei/container/landlock/landlock.go
Clayton Gilmer 1fa1ea5cbb
All checks were successful
Test / Create distribution (push) Successful in 38s
Test / Create distribution (pull_request) Successful in 33s
Test / Sandbox (push) Successful in 2m19s
Test / Sandbox (pull_request) Successful in 2m16s
Test / Hakurei (push) Successful in 3m8s
Test / Hakurei (pull_request) Successful in 3m4s
Test / Hpkg (push) Successful in 4m17s
Test / Hpkg (pull_request) Successful in 4m15s
Test / Sandbox (race detector) (push) Successful in 4m27s
Test / Sandbox (race detector) (pull_request) Successful in 4m24s
Test / Hakurei (race detector) (push) Successful in 4m59s
Test / Hakurei (race detector) (pull_request) Successful in 4m55s
Test / Flake checks (push) Successful in 1m23s
Test / Flake checks (pull_request) Successful in 1m23s
container: optionally isolate host abstract UNIX domain sockets via landlock
2025-08-18 12:06:14 +09:00

18 lines
456 B
Go

package landlock
/*
#include <linux/landlock.h>
#include <sys/syscall.h>
*/
import "C"
const (
LANDLOCK_CREATE_RULESET_VERSION = C.LANDLOCK_CREATE_RULESET_VERSION
LANDLOCK_SCOPE_ABSTRACT_UNIX_SOCKET = C.LANDLOCK_SCOPE_ABSTRACT_UNIX_SOCKET
LANDLOCK_SCOPE_SIGNAL = C.LANDLOCK_SCOPE_SIGNAL
)
type RulesetAttr = C.struct_landlock_ruleset_attr
func NewRulesetAttr(scoped int) RulesetAttr { return RulesetAttr{scoped: C.__u64(scoped)} }