aboutsummaryrefslogtreecommitdiffhomepage
path: root/internal/app/start.go
diff options
context:
space:
mode:
authorOphestra <cat@gensokyo.uk>2025-01-20 21:12:39 +0900
committerOphestra <cat@gensokyo.uk>2025-01-20 21:12:39 +0900
commit27f5922d5c4d4432246d6de6eb0d81d574cdc8c7 (patch)
tree7eb0205f8f0e7a6211f566efa354d9794195e7d8 /internal/app/start.go
parent2cf1f46ea235fd533a69ded5d439ffddba049eab (diff)
fst: include syscall filter configuration
This value is passed through to shim. Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/app/start.go')
-rw-r--r--internal/app/start.go9
1 files changed, 5 insertions, 4 deletions
diff --git a/internal/app/start.go b/internal/app/start.go
index 1755b333..1825d9a8 100644
--- a/internal/app/start.go
+++ b/internal/app/start.go
@@ -76,10 +76,11 @@ func (a *app) Run(ctx context.Context, rs *RunState) error {
// send payload
if err = a.shim.Serve(shimSetupCtx, &shim.Payload{
- Argv: a.seal.command,
- Exec: shimExec,
- Bwrap: a.seal.sys.bwrap,
- Home: a.seal.sys.user.data,
+ Argv: a.seal.command,
+ Exec: shimExec,
+ Bwrap: a.seal.sys.bwrap,
+ Home: a.seal.sys.user.data,
+ Syscall: a.seal.scmp,
Verbose: fmsg.Verbose(),
}); err != nil {