diff options
Diffstat (limited to 'internal/app/share.runtime.go')
| -rw-r--r-- | internal/app/share.runtime.go | 22 |
1 files changed, 11 insertions, 11 deletions
diff --git a/internal/app/share.runtime.go b/internal/app/share.runtime.go index ebb13aa6..0c7149ed 100644 --- a/internal/app/share.runtime.go +++ b/internal/app/share.runtime.go @@ -4,7 +4,7 @@ import ( "path" "git.ophivana.moe/cat/fortify/acl" - "git.ophivana.moe/cat/fortify/internal/state" + "git.ophivana.moe/cat/fortify/internal/system" ) const ( @@ -20,28 +20,28 @@ func (seal *appSeal) shareRuntime() { seal.sys.bwrap.Tmpfs(seal.sys.runtime, 8*1024*1024) // point to inner runtime path `/run/user/%d` - seal.sys.setEnv(xdgRuntimeDir, seal.sys.runtime) - seal.sys.setEnv(xdgSessionClass, "user") - seal.sys.setEnv(xdgSessionType, "tty") + seal.sys.bwrap.SetEnv[xdgRuntimeDir] = seal.sys.runtime + seal.sys.bwrap.SetEnv[xdgSessionClass] = "user" + seal.sys.bwrap.SetEnv[xdgSessionType] = "tty" // ensure RunDir (e.g. `/run/user/%d/fortify`) - seal.sys.ensure(seal.RunDirPath, 0700) - seal.sys.updatePermTag(state.EnableLength, seal.RunDirPath, acl.Execute) + seal.sys.Ensure(seal.RunDirPath, 0700) + seal.sys.UpdatePermType(system.User, seal.RunDirPath, acl.Execute) // ensure runtime directory ACL (e.g. `/run/user/%d`) - seal.sys.updatePermTag(state.EnableLength, seal.RuntimePath, acl.Execute) + seal.sys.UpdatePermType(system.User, seal.RuntimePath, acl.Execute) // ensure Share (e.g. `/tmp/fortify.%d`) // acl is unnecessary as this directory is world executable - seal.sys.ensure(seal.SharePath, 0701) + seal.sys.Ensure(seal.SharePath, 0701) // ensure process-specific share (e.g. `/tmp/fortify.%d/%s`) // acl is unnecessary as this directory is world executable seal.share = path.Join(seal.SharePath, seal.id.String()) - seal.sys.ensureEphemeral(seal.share, 0701) + seal.sys.Ephemeral(system.Process, seal.share, 0701) // ensure process-specific share local to XDG_RUNTIME_DIR (e.g. `/run/user/%d/fortify/%s`) seal.shareLocal = path.Join(seal.RunDirPath, seal.id.String()) - seal.sys.ensureEphemeral(seal.shareLocal, 0700) - seal.sys.updatePerm(seal.shareLocal, acl.Execute) + seal.sys.Ephemeral(system.Process, seal.shareLocal, 0700) + seal.sys.UpdatePerm(seal.shareLocal, acl.Execute) } |