diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-01-19 19:18:22 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-01-20 00:20:04 +0900 |
| commit | eb0ef2d1151fbca484bf0c82667a511dbd0cb80b (patch) | |
| tree | c8a7a56a0b29167e9f1e04629b428bc00fd73d42 /internal/proc/priv | |
| parent | 2f705068658bf9c47a5fa829105111e46a7732a0 (diff) | |
helper/bwrap: generic extra file interface
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/proc/priv')
| -rw-r--r-- | internal/proc/priv/shim/main.go | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/internal/proc/priv/shim/main.go b/internal/proc/priv/shim/main.go index 49ec7f1a..6bd08343 100644 --- a/internal/proc/priv/shim/main.go +++ b/internal/proc/priv/shim/main.go @@ -138,7 +138,11 @@ func Main() { if b, err := helper.NewBwrap( conf, innerInit, nil, func(int, int) []string { return make([]string, 0) }, - syncFd, + []helper.BwrapExtraFile{ + // keep this fd open while sandbox is running + // (--sync-fd FD) + {"--sync-fd", syncFd}, + }, ); err != nil { fmsg.Fatalf("malformed sandbox config: %v", err) } else { |