diff options
| author | Ophestra Umiker <cat@ophivana.moe> | 2024-10-14 02:27:02 +0900 |
|---|---|---|
| committer | Ophestra Umiker <cat@ophivana.moe> | 2024-10-14 02:27:02 +0900 |
| commit | 1302bcede057538665a4eb626357409d8cb515e8 (patch) | |
| tree | c4cac4388ef7550c65cc69370175db35b79112d7 /internal/app/config.go | |
| parent | 315c9b8849ae7ad764035dc6ceddc0bc35cb0c95 (diff) | |
init: custom init process inside sandbox
Bubblewrap as init is a bit awkward and don't support a few setup actions fortify will need, such as starting/supervising nscd.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
Diffstat (limited to 'internal/app/config.go')
| -rw-r--r-- | internal/app/config.go | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/internal/app/config.go b/internal/app/config.go index 4c21d8be..7950c59d 100644 --- a/internal/app/config.go +++ b/internal/app/config.go @@ -90,6 +90,7 @@ func (s *SandboxConfig) Bwrap() *bwrap.Config { Mqueue: []string{"/dev/mqueue"}, NewSession: !s.NoNewSession, DieWithParent: true, + AsInit: true, } for _, c := range s.Filesystem { |