From 580128922be2a983192804b7963175b2a0fe2093 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Wed, 22 Jan 2025 12:01:30 +0900 Subject: cmd/fpkg: expose syscall policy options Signed-off-by: Ophestra --- cmd/fpkg/start.go | 2 ++ 1 file changed, 2 insertions(+) (limited to 'cmd/fpkg/start.go') diff --git a/cmd/fpkg/start.go b/cmd/fpkg/start.go index 1dc31e43..4a882110 100644 --- a/cmd/fpkg/start.go +++ b/cmd/fpkg/start.go @@ -5,6 +5,7 @@ import ( "path" "git.gensokyo.uk/security/fortify/fst" + "git.gensokyo.uk/security/fortify/helper/bwrap" "git.gensokyo.uk/security/fortify/internal/fmsg" ) @@ -96,6 +97,7 @@ func actionStart(args []string) { UserNS: app.UserNS, Net: app.Net, Dev: app.Dev, + Syscall: &bwrap.SyscallPolicy{DenyDevel: !app.Devel, Multiarch: app.Multiarch, Bluetooth: app.Bluetooth}, NoNewSession: app.NoNewSession || dropShell, MapRealUID: app.MapRealUID, DirectWayland: app.DirectWayland, -- cgit v1.3.1