go-sandbox/forkexec/consts.go
2019-07-12 21:15:38 -07:00

29 lines
640 B
Go

package forkexec
import (
"golang.org/x/sys/unix"
)
// defines missing consts from syscall package
const (
SECCOMP_SET_MODE_STRICT = 0
SECCOMP_SET_MODE_FILTER = 1
SECCOMP_FILTER_FLAG_TSYNC = 1
// Unshare flags
UnshareFlags = unix.CLONE_NEWIPC | unix.CLONE_NEWNET | unix.CLONE_NEWNS |
unix.CLONE_NEWPID | unix.CLONE_NEWUSER | unix.CLONE_NEWUTS | unix.CLONE_NEWCGROUP
)
// used by unshare remount / to private
var (
none = [...]byte{'n', 'o', 'n', 'e', 0}
slash = [...]byte{'/', 0}
// tmp dir made by pivot_root
OldRoot = "old_root"
// go does not allow constant uintptr to be negative...
_AT_FDCWD = unix.AT_FDCWD
)