diff options
| author | Ophestra Umiker <cat@ophivana.moe> | 2024-10-15 02:54:50 +0900 |
|---|---|---|
| committer | Ophestra Umiker <cat@ophivana.moe> | 2024-10-15 02:54:50 +0900 |
| commit | aa5dd2313c5edee0337280640566e11c6c977552 (patch) | |
| tree | 40b165ce3f844c5456b3aaa93bdd2254ac818979 | |
| parent | 2faf510146733c28a5dbc3245175700abcf4f966 (diff) | |
app: filter /tmp from permissive default
Tmpdir is bind mounted over further along in execution so there is no point sharing it here.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
| -rw-r--r-- | internal/app/seal.go | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/internal/app/seal.go b/internal/app/seal.go index 146bcc52..bf634c40 100644 --- a/internal/app/seal.go +++ b/internal/app/seal.go @@ -134,6 +134,7 @@ func (a *app) Seal(config *Config) error { case "proc": case "dev": case "run": + case "tmp": case "mnt": default: p := "/" + name |