diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-02-15 02:56:08 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-02-15 03:06:10 +0900 |
| commit | ea8d1c07df18ceb94932fcc94ad00eb57c99da33 (patch) | |
| tree | 84dd16fd18987542cbf5840b0727374627517f82 /internal/app/share.go | |
| parent | a0062d827515c092cae7dfcf1af0033b87b3e90e (diff) | |
priv/shim: move /sbin/init setup to app
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/app/share.go')
| -rw-r--r-- | internal/app/share.go | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/internal/app/share.go b/internal/app/share.go index 6e72c6f1..528cd09f 100644 --- a/internal/app/share.go +++ b/internal/app/share.go @@ -293,6 +293,10 @@ func (seal *appSeal) setupShares(bus [2]*dbus.Config, os linux.System) error { seal.sys.bwrap.Tmpfs(dest, 8*1024) } + // mount fortify in sandbox for init + seal.sys.bwrap.Bind(os.MustExecutable(), path.Join(fst.Tmp, "sbin/fortify")) + seal.sys.bwrap.Symlink("fortify", path.Join(fst.Tmp, "sbin/init")) + // append extra perms for _, p := range seal.extraPerms { if p == nil { |