diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-08-28 00:45:57 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-08-28 00:45:57 +0900 |
| commit | da0459aca1988401c9e8743bedb349d6f8544aa3 (patch) | |
| tree | 7e5c3e74b4f8c145495a17f7922e90fdcb4a1add /internal/app/container_linux.go | |
| parent | 1be8de6f5ca4c7e40f5999ce4f960010fc36acb1 (diff) | |
internal/app: update doc comments
A lot of these comments are quite old and have not been updated to reflect changes.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/app/container_linux.go')
| -rw-r--r-- | internal/app/container_linux.go | 6 |
1 files changed, 2 insertions, 4 deletions
diff --git a/internal/app/container_linux.go b/internal/app/container_linux.go index cd423ad6..cdefe170 100644 --- a/internal/app/container_linux.go +++ b/internal/app/container_linux.go @@ -16,8 +16,7 @@ import ( "hakurei.app/system/dbus" ) -// in practice there should be less than 30 entries added by the runtime; -// allocating slightly more as a margin for future expansion +// in practice there should be less than 30 system mount points const preallocateOpsCount = 1 << 5 // newContainer initialises [container.Params] via [hst.ContainerConfig]. @@ -67,8 +66,6 @@ func newContainer(s *hst.ContainerConfig, os sys.State, prefix string, uid, gid } if s.MapRealUID { - /* some programs fail to connect to dbus session running as a different uid - so this workaround is introduced to map priv-side caller uid in container */ params.Uid = os.Getuid() *uid = params.Uid params.Gid = os.Getgid() @@ -104,6 +101,7 @@ func newContainer(s *hst.ContainerConfig, os sys.State, prefix string, uid, gid } /* retrieve paths and hide them if they're made available in the sandbox; + this feature tries to improve user experience of permissive defaults, and to warn about issues in custom configuration; it is NOT a security feature and should not be treated as such, ALWAYS be careful with what you bind */ |