diff options
Diffstat (limited to 'internal')
| -rw-r--r-- | internal/app/config.go | 6 | ||||
| -rw-r--r-- | internal/app/seal.go | 2 |
2 files changed, 4 insertions, 4 deletions
diff --git a/internal/app/config.go b/internal/app/config.go index 0c173170..96c51ce7 100644 --- a/internal/app/config.go +++ b/internal/app/config.go @@ -55,7 +55,7 @@ type SandboxConfig struct { // do not run in new session NoNewSession bool `json:"no_new_session,omitempty"` // map target user uid to privileged user uid in the user namespace - UseRealUID bool `json:"use_real_uid"` + MapRealUID bool `json:"map_real_uid"` // mediated access to wayland socket Wayland bool `json:"wayland,omitempty"` @@ -92,7 +92,7 @@ func (s *SandboxConfig) Bwrap(os linux.System) (*bwrap.Config, error) { } var uid int - if !s.UseRealUID { + if !s.MapRealUID { uid = 65534 } else { uid = os.Geteuid() @@ -185,7 +185,7 @@ func Template() *Config { UserNS: true, Net: true, NoNewSession: true, - UseRealUID: true, + MapRealUID: true, Dev: true, Wayland: false, // example API credentials pulled from Google Chrome diff --git a/internal/app/seal.go b/internal/app/seal.go index 0b60920f..0846a7f8 100644 --- a/internal/app/seal.go +++ b/internal/app/seal.go @@ -130,7 +130,7 @@ func (a *app) Seal(config *Config) error { seal.sys = new(appSealSys) // mapped uid - if config.Confinement.Sandbox != nil && config.Confinement.Sandbox.UseRealUID { + if config.Confinement.Sandbox != nil && config.Confinement.Sandbox.MapRealUID { seal.sys.mappedID = a.os.Geteuid() } else { seal.sys.mappedID = 65534 |