diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-01-22 02:00:49 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-01-22 02:00:49 +0900 |
| commit | 5a64cdaf4fedf4cc12f4574f07e1376e907aa7d8 (patch) | |
| tree | cf189ab27363732a9c6097e0d4632b4bf4ea8f8e /ldd | |
| parent | a30f5e1226f5176f59657ef67e412c53bcedb856 (diff) | |
ldd: enable syscall filter
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'ldd')
| -rw-r--r-- | ldd/exec.go | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/ldd/exec.go b/ldd/exec.go index 23c4e892..47e20a82 100644 --- a/ldd/exec.go +++ b/ldd/exec.go @@ -20,6 +20,7 @@ func Exec(p string) ([]*Entry, error) { (&bwrap.Config{ Hostname: "fortify-ldd", Chdir: "/", + Syscall: &bwrap.SyscallPolicy{DenyDevel: true, Multiarch: true}, NewSession: true, DieWithParent: true, }).Bind("/", "/").DevTmpfs("/dev"), "ldd", |