Update the nftables crate dependency

mbuesch · Jan 24, 2025 · 6fa867a · 6fa867a
1 parent a78de91
commit 6fa867a
Show file tree

Hide file tree

Showing 7 changed files with 93 additions and 68 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -13,7 +13,7 @@ jobs:
     strategy:
       matrix:
         toolchain:
-          - 1.75.0 # MSRV
+          - 1.76.0 # MSRV
           - 1.84.0
     runs-on: ubuntu-latest
     steps:
@@ -29,7 +29,7 @@ jobs:
     strategy:
       matrix:
         toolchain:
-          - 1.75.0 # MSRV
+          - 1.76.0 # MSRV
           - 1.84.0
         os:
           - windows-latest

diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -34,7 +34,7 @@ getrandom = "0.2"
 hickory-resolver = "0.24"
 hmac = "0.12"
 libc = "0.2"
-nftables = "0.5"
+nftables = "0.6"
 sd-notify = "0.4"
 seccompiler = "0.4"
 sha3 = "0.10"

diff --git a/letmein-seccomp/src/lib.rs b/letmein-seccomp/src/lib.rs
@@ -82,6 +82,7 @@ pub enum Allow {
     Wait,
     Rlimit,
     Uname,
+    Pidfd,
 }
 
 /// Action to be performed, if a syscall is executed that is not in the allow-list.
@@ -336,6 +337,9 @@ impl Filter {
                 Allow::Uname => {
                     add_sys(&mut map, sys!(SYS_uname));
                 }
+                Allow::Pidfd => {
+                    add_sys(&mut map, sys!(SYS_pidfd_open));
+                }
             }
         }
 

diff --git a/letmeinfwd/Cargo.toml b/letmeinfwd/Cargo.toml
@@ -19,7 +19,7 @@ clap = { workspace = true }
 letmein-conf = { workspace = true }
 letmein-fwproto = { workspace = true }
 libc = { workspace = true }
-nftables = { workspace = true }
+nftables = { workspace = true, features = [ "tokio" ] }
 tokio = { workspace = true, features = [ "rt", "net", "macros", "signal", "sync", "time" ] }
 
 [target.'cfg(any(target_os="linux", target_os="android"))'.dependencies]