diff options
| author | Ophestra Umiker <cat@ophivana.moe> | 2024-11-18 00:18:21 +0900 |
|---|---|---|
| committer | Ophestra Umiker <cat@ophivana.moe> | 2024-11-18 00:18:21 +0900 |
| commit | 05b7dbf066cb74d2901ff9acb3a42662a2af722e (patch) | |
| tree | 72f9d85e591a168a936d82b4e35559e04512cf06 /internal/app/config.go | |
| parent | 866270ff05379c571c665940a7c1b2010891e960 (diff) | |
app: alternative inner home path
Support binding home to an alternative path in the mount namespace.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
Diffstat (limited to 'internal/app/config.go')
| -rw-r--r-- | internal/app/config.go | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/internal/app/config.go b/internal/app/config.go index dd45b023..298925de 100644 --- a/internal/app/config.go +++ b/internal/app/config.go @@ -30,8 +30,10 @@ type ConfinementConfig struct { Groups []string `json:"groups"` // passwd username in the sandbox, defaults to chronos Username string `json:"username,omitempty"` - // home directory in sandbox - Home string `json:"home"` + // home directory in sandbox, empty for outer + Inner string `json:"home_inner"` + // home directory in init namespace + Outer string `json:"home"` // bwrap sandbox confinement configuration Sandbox *SandboxConfig `json:"sandbox"` @@ -185,7 +187,8 @@ func Template() *Config { AppID: 9, Groups: []string{"video"}, Username: "chronos", - Home: "/var/lib/persist/home/org.chromium.Chromium", + Outer: "/var/lib/persist/home/org.chromium.Chromium", + Inner: "/var/lib/fortify", Sandbox: &SandboxConfig{ Hostname: "localhost", UserNS: true, |