diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-02-19 13:41:06 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-02-19 16:20:25 +0900 |
| commit | ef81828e0c1ce6277e0b124f6062eab564dfeceb (patch) | |
| tree | 35a127281d3e75d9a71d070133ce3ed26644a40e /fst/config.go | |
| parent | 2978a6f046f52861a7ac749d1e414758caab8bd5 (diff) | |
app: remove share method
This is yet another implementation detail from before system.I, getting rid of this vastly cuts down on redundant seal state.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'fst/config.go')
| -rw-r--r-- | fst/config.go | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/fst/config.go b/fst/config.go index 89107798..d96934d4 100644 --- a/fst/config.go +++ b/fst/config.go @@ -10,9 +10,11 @@ const Tmp = "/.fortify" // Config is used to seal an app type Config struct { - // application ID + // reverse-DNS style arbitrary identifier string from config; + // passed to wayland security-context-v1 as application ID + // and used as part of defaults in dbus session proxy ID string `json:"id"` - // value passed through to the child process as its argv + // final argv, passed to init Command []string `json:"command"` Confinement ConfinementConfig `json:"confinement"` @@ -32,7 +34,7 @@ type ConfinementConfig struct { Outer string `json:"home"` // bwrap sandbox confinement configuration Sandbox *SandboxConfig `json:"sandbox"` - // extra acl entries to append + // extra acl ops, runs after everything else ExtraPerms []*ExtraPermConfig `json:"extra_perms,omitempty"` // reference to a system D-Bus proxy configuration, |