diff options
| author | Ophestra Umiker <cat@ophivana.moe> | 2024-11-04 00:49:32 +0900 |
|---|---|---|
| committer | Ophestra Umiker <cat@ophivana.moe> | 2024-11-04 00:49:32 +0900 |
| commit | 7962681f4a9ea0614fe788ca2cda2c697cfff162 (patch) | |
| tree | 43020bd45c26bc926e83782858b59d474f57e9ce /internal/app/config.go | |
| parent | bfcce3ff75017aa8a4306cae88a4f31d9cc7238c (diff) | |
app: format mapped uid instead of real uid
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
Diffstat (limited to 'internal/app/config.go')
| -rw-r--r-- | internal/app/config.go | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/internal/app/config.go b/internal/app/config.go index 49465257..eccb5922 100644 --- a/internal/app/config.go +++ b/internal/app/config.go @@ -8,6 +8,11 @@ import ( "git.ophivana.moe/security/fortify/internal/system" ) +const ( + mappedID = 65534 + mappedIDString = "65534" +) + // Config is used to seal an *App type Config struct { // D-Bus application ID @@ -95,7 +100,7 @@ func (s *SandboxConfig) Bwrap() *bwrap.Config { // initialise map Chmod: make(map[string]os.FileMode), }). - SetUID(65534).SetGID(65534). + SetUID(mappedID).SetGID(mappedID). Procfs("/proc").DevTmpfs("/dev").Mqueue("/dev/mqueue"). Tmpfs("/dev/fortify", 4*1024) |