From 580128922be2a983192804b7963175b2a0fe2093 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Wed, 22 Jan 2025 12:01:30 +0900 Subject: cmd/fpkg: expose syscall policy options Signed-off-by: Ophestra --- cmd/fpkg/bundle.go | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'cmd/fpkg/bundle.go') diff --git a/cmd/fpkg/bundle.go b/cmd/fpkg/bundle.go index 22b9de28..5c9db725 100644 --- a/cmd/fpkg/bundle.go +++ b/cmd/fpkg/bundle.go @@ -38,6 +38,13 @@ type bundleInfo struct { // passed through to [fst.Config] Enablements system.Enablements `json:"enablements"` + // passed through inverted to [bwrap.SyscallPolicy] + Devel bool `json:"devel,omitempty"` + // passed through to [bwrap.SyscallPolicy] + Multiarch bool `json:"multiarch,omitempty"` + // passed through to [bwrap.SyscallPolicy] + Bluetooth bool `json:"bluetooth,omitempty"` + // allow gpu access within sandbox GPU bool `json:"gpu"` // store path to nixGL mesa wrappers -- cgit v1.3.1