diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-04-11 18:54:00 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-04-11 18:54:00 +0900 |
| commit | 996790946092a9291eb21e297d1f0f04deab8b42 (patch) | |
| tree | a3a8ff49deb5ed02ae282391720ce9613c2db7b3 /internal/app/app_nixos_test.go | |
| parent | c806f43881223a85ad888f434e078dcc68de028d (diff) | |
sandbox: relative autoetc links
This allows nested containers to use autoetc, and increases compatibility with other implementations.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/app/app_nixos_test.go')
| -rw-r--r-- | internal/app/app_nixos_test.go | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/internal/app/app_nixos_test.go b/internal/app/app_nixos_test.go index 30175518..88efa7d3 100644 --- a/internal/app/app_nixos_test.go +++ b/internal/app/app_nixos_test.go @@ -124,8 +124,7 @@ var testCasesNixos = []sealTestCase{ Bind("/sys/devices", "/sys/devices", sandbox.BindOptional). Bind("/run/opengl-driver", "/run/opengl-driver", 0). Bind("/dev/dri", "/dev/dri", sandbox.BindDevice|sandbox.BindWritable|sandbox.BindOptional). - Bind("/etc", fst.Tmp+"/etc", 0). - Etc(fst.Tmp+"/etc"). + Etc("/etc", "8e2c76b066dabe574cf073bdb46eb5c1"). Tmpfs("/run/user", 4096, 0755). Tmpfs("/run/user/1971", 8388608, 0700). Bind("/tmp/fortify.1971/tmpdir/1", "/tmp", sandbox.BindWritable). |