mirror/runc
1
0
Fork 0
mirror of https://github.com/opencontainers/runc.git synced 2026-07-11 06:03:57 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #5191 from kolyshkin/unix

Browse Source 
libct/exeseal: drop own F_SEAL_EXEC
This commit is contained in:
lfbzhm
2026-03-21 19:55:16 +08:00
committed by GitHub
parent dc2558d7b2 f00b2f9fd5
commit 132498f869
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
libcontainer/exeseal/cloned_binary_linux.go
+1 -2
View File
@@ -54,8 +54,7 @@ func sealMemfd(f **os.File) error {
// 05d351102dbe and <https://github.com/opencontainers/runc/pull/4640>).
// F_SEAL_EXEC -- Linux 6.3
const F_SEAL_EXEC = 0x20 //nolint:revive // this matches the unix.* name
_, _ = unix.FcntlInt(fd, unix.F_ADD_SEALS, F_SEAL_EXEC)
_, _ = unix.FcntlInt(fd, unix.F_ADD_SEALS, unix.F_SEAL_EXEC)
// Apply all original memfd seals.
_, err := unix.FcntlInt(fd, unix.F_ADD_SEALS, baseMemfdSeals)