diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-04-01 00:53:04 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-04-01 00:53:04 +0900 |
| commit | 022242a84aea7e75676b1b491c01b7240f77540e (patch) | |
| tree | 5b015b981099f97409d61e1cbbff270aea8b6a5c /internal/app/seal.go | |
| parent | 8aeb06f53c5cfdab51a3b3e7fcc8a6313e99db38 (diff) | |
app: wayland socket in process share
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/app/seal.go')
| -rw-r--r-- | internal/app/seal.go | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/internal/app/seal.go b/internal/app/seal.go index 1134832f..4c8fbc78 100644 --- a/internal/app/seal.go +++ b/internal/app/seal.go @@ -367,14 +367,13 @@ func (seal *outcome) finalise(ctx context.Context, sys sys.State, config *fst.Co seal.env[wl.WaylandDisplay] = wl.FallbackName if !config.Confinement.Sandbox.DirectWayland { // set up security-context-v1 - socketDir := path.Join(share.sc.SharePath, "wayland") - outerPath := path.Join(socketDir, seal.id.String()) - seal.sys.Ensure(socketDir, 0711) appID := config.ID if appID == "" { // use instance ID in case app id is not set appID = "uk.gensokyo.fortify." + seal.id.String() } + // downstream socket paths + outerPath := path.Join(share.instance(), "wayland") seal.sys.Wayland(&seal.sync, outerPath, socketPath, appID, seal.id.String()) seal.container.Bind(outerPath, innerPath, 0) } else { // bind mount wayland socket (insecure) |