diff options
| author | Ophestra Umiker <cat@ophivana.moe> | 2024-11-09 11:57:36 +0900 |
|---|---|---|
| committer | Ophestra Umiker <cat@ophivana.moe> | 2024-11-09 12:01:34 +0900 |
| commit | 9a13b311ac9b180a9a24e0d99a0487fb1997de32 (patch) | |
| tree | 0fead98ffa0eedd7b67d50e2c46129c32447046b /internal/app/config.go | |
| parent | 45fead18c377abcf5138f26b4908389f34d2ba60 (diff) | |
app/config: rename map_real_uid from use_real_uid
This option only changes mapped uid in the user namespace.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
Diffstat (limited to 'internal/app/config.go')
| -rw-r--r-- | internal/app/config.go | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/internal/app/config.go b/internal/app/config.go index 0c173170..96c51ce7 100644 --- a/internal/app/config.go +++ b/internal/app/config.go @@ -55,7 +55,7 @@ type SandboxConfig struct { // do not run in new session NoNewSession bool `json:"no_new_session,omitempty"` // map target user uid to privileged user uid in the user namespace - UseRealUID bool `json:"use_real_uid"` + MapRealUID bool `json:"map_real_uid"` // mediated access to wayland socket Wayland bool `json:"wayland,omitempty"` @@ -92,7 +92,7 @@ func (s *SandboxConfig) Bwrap(os linux.System) (*bwrap.Config, error) { } var uid int - if !s.UseRealUID { + if !s.MapRealUID { uid = 65534 } else { uid = os.Geteuid() @@ -185,7 +185,7 @@ func Template() *Config { UserNS: true, Net: true, NoNewSession: true, - UseRealUID: true, + MapRealUID: true, Dev: true, Wayland: false, // example API credentials pulled from Google Chrome |