From f6c0fc1aa854ae5ce73d57ecb09d47c0d4dd2cc3 Mon Sep 17 00:00:00 2001 From: baude Date: Tue, 26 Jun 2018 13:50:12 -0500 Subject: Vendor in latest runtime-tools Newer runtime tools separates syscalls by OS so we can build darwin. Signed-off-by: baude Closes: #1007 Approved by: baude --- .../opencontainers/runtime-tools/generate/seccomp/seccomp_default.go | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) (limited to 'vendor/github.com/opencontainers/runtime-tools/generate/seccomp/seccomp_default.go') diff --git a/vendor/github.com/opencontainers/runtime-tools/generate/seccomp/seccomp_default.go b/vendor/github.com/opencontainers/runtime-tools/generate/seccomp/seccomp_default.go index 35b12cd65..5fee5a3b2 100644 --- a/vendor/github.com/opencontainers/runtime-tools/generate/seccomp/seccomp_default.go +++ b/vendor/github.com/opencontainers/runtime-tools/generate/seccomp/seccomp_default.go @@ -2,7 +2,6 @@ package seccomp import ( "runtime" - "syscall" "github.com/opencontainers/runtime-spec/specs-go" rspec "github.com/opencontainers/runtime-spec/specs-go" @@ -513,7 +512,7 @@ func DefaultProfile(rs *specs.Spec) *rspec.LinuxSeccomp { Args: []rspec.LinuxSeccompArg{ { Index: sysCloneFlagsIndex, - Value: syscall.CLONE_NEWNS | syscall.CLONE_NEWUTS | syscall.CLONE_NEWIPC | syscall.CLONE_NEWUSER | syscall.CLONE_NEWPID | syscall.CLONE_NEWNET, + Value: CloneNewNS | CloneNewUTS | CloneNewIPC | CloneNewUser | CloneNewPID | CloneNewNet, ValueTwo: 0, Op: rspec.OpMaskedEqual, }, -- cgit v1.2.3-54-g00ecf