diff options
| author | Tamir Duberstein <tamird@google.com> | 2021-05-26 18:13:05 -0700 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2021-05-26 18:15:43 -0700 |
| commit | 097efe81a19a6ee11738957a3091e99a2caa46d4 (patch) | |
| tree | d37d778e7379f9a463ec29232cc2ff737bee4284 /runsc | |
| parent | 522ae2dd1f3c0d5aea52a9883cc1319e3b1ebce4 (diff) | |
Use the stack RNG everywhere
...except in tests.
Note this replaces some uses of a cryptographic RNG with a plain RNG.
PiperOrigin-RevId: 376070666
Diffstat (limited to 'runsc')
| -rw-r--r-- | runsc/boot/loader.go | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/runsc/boot/loader.go b/runsc/boot/loader.go index efa014b25..b73ac101f 100644 --- a/runsc/boot/loader.go +++ b/runsc/boot/loader.go @@ -1115,9 +1115,9 @@ func newEmptySandboxNetworkStack(clock tcpip.Clock, uniqueID stack.UniqueID) (in HandleLocal: true, // Enable raw sockets for users with sufficient // privileges. - RawFactory: raw.EndpointFactory{}, - UniqueID: uniqueID, - IPTables: netfilter.DefaultLinuxTables(), + RawFactory: raw.EndpointFactory{}, + UniqueID: uniqueID, + DefaultIPTables: netfilter.DefaultLinuxTables, })} // Enable SACK Recovery. |