diff options
Diffstat (limited to 'internal/app/share.go')
| -rw-r--r-- | internal/app/share.go | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/internal/app/share.go b/internal/app/share.go index 6e72c6f1..528cd09f 100644 --- a/internal/app/share.go +++ b/internal/app/share.go @@ -293,6 +293,10 @@ func (seal *appSeal) setupShares(bus [2]*dbus.Config, os linux.System) error { seal.sys.bwrap.Tmpfs(dest, 8*1024) } + // mount fortify in sandbox for init + seal.sys.bwrap.Bind(os.MustExecutable(), path.Join(fst.Tmp, "sbin/fortify")) + seal.sys.bwrap.Symlink("fortify", path.Join(fst.Tmp, "sbin/init")) + // append extra perms for _, p := range seal.extraPerms { if p == nil { |