diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-02-15 02:56:08 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-02-15 03:06:10 +0900 |
| commit | ea8d1c07df18ceb94932fcc94ad00eb57c99da33 (patch) | |
| tree | 84dd16fd18987542cbf5840b0727374627517f82 /internal/priv | |
| parent | a0062d827515c092cae7dfcf1af0033b87b3e90e (diff) | |
priv/shim: move /sbin/init setup to app
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/priv')
| -rw-r--r-- | internal/priv/shim/main.go | 11 |
1 files changed, 1 insertions, 10 deletions
diff --git a/internal/priv/shim/main.go b/internal/priv/shim/main.go index 4397cc37..7baf5330 100644 --- a/internal/priv/shim/main.go +++ b/internal/priv/shim/main.go @@ -121,21 +121,12 @@ func Main() { }() } - // bind fortify inside sandbox - var ( - innerSbin = path.Join(fst.Tmp, "sbin") - innerFortify = path.Join(innerSbin, "fortify") - innerInit = path.Join(innerSbin, "init") - ) - conf.Bind(proc.MustExecutable(), innerFortify) - conf.Symlink("fortify", innerInit) - helper.BubblewrapName = payload.Exec[0] // resolved bwrap path by parent if fmsg.Verbose() { seccomp.CPrintln = fmsg.Println } if b, err := helper.NewBwrap( - conf, innerInit, + conf, path.Join(fst.Tmp, "sbin/init"), nil, func(int, int) []string { return make([]string, 0) }, extraFiles, syncFd, |