From f00b2f9fd58d739a98745827d1d64d1aa58cfd0c Mon Sep 17 00:00:00 2001 From: Kir Kolyshkin Date: Fri, 20 Mar 2026 15:49:43 -0700 Subject: [PATCH] libct/exeseal: drop own F_SEAL_EXEC Since golang.org/x/sys@v0.22 it is available from unix. Signed-off-by: Kir Kolyshkin --- libcontainer/exeseal/cloned_binary_linux.go | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/libcontainer/exeseal/cloned_binary_linux.go b/libcontainer/exeseal/cloned_binary_linux.go index 1c5c60872..a3c6e59dc 100644 --- a/libcontainer/exeseal/cloned_binary_linux.go +++ b/libcontainer/exeseal/cloned_binary_linux.go @@ -54,8 +54,7 @@ func sealMemfd(f **os.File) error { // 05d351102dbe and ). // F_SEAL_EXEC -- Linux 6.3 - const F_SEAL_EXEC = 0x20 //nolint:revive // this matches the unix.* name - _, _ = unix.FcntlInt(fd, unix.F_ADD_SEALS, F_SEAL_EXEC) + _, _ = unix.FcntlInt(fd, unix.F_ADD_SEALS, unix.F_SEAL_EXEC) // Apply all original memfd seals. _, err := unix.FcntlInt(fd, unix.F_ADD_SEALS, baseMemfdSeals)