diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-01-20 21:12:39 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-01-20 21:12:39 +0900 |
| commit | 27f5922d5c4d4432246d6de6eb0d81d574cdc8c7 (patch) | |
| tree | 7eb0205f8f0e7a6211f566efa354d9794195e7d8 /internal/proc | |
| parent | 2cf1f46ea235fd533a69ded5d439ffddba049eab (diff) | |
fst: include syscall filter configuration
This value is passed through to shim.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/proc')
| -rw-r--r-- | internal/proc/priv/shim/payload.go | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/internal/proc/priv/shim/payload.go b/internal/proc/priv/shim/payload.go index e9425031..2d6854f9 100644 --- a/internal/proc/priv/shim/payload.go +++ b/internal/proc/priv/shim/payload.go @@ -1,6 +1,9 @@ package shim -import "git.gensokyo.uk/security/fortify/helper/bwrap" +import ( + "git.gensokyo.uk/security/fortify/fst" + "git.gensokyo.uk/security/fortify/helper/bwrap" +) const Env = "FORTIFY_SHIM" @@ -15,6 +18,8 @@ type Payload struct { Home string // sync fd Sync *uintptr + // seccomp opts pass through + Syscall *fst.SyscallConfig // verbosity pass through Verbose bool |