From 44277dc0f1fd1806f5ceea34246a4c805a06b61b Mon Sep 17 00:00:00 2001 From: Ophestra Date: Mon, 17 Mar 2025 00:13:14 +0900 Subject: dbus: run in native sandbox Signed-off-by: Ophestra --- dbus/proxy.go | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) (limited to 'dbus/proxy.go') diff --git a/dbus/proxy.go b/dbus/proxy.go index e7785fd8..209ae573 100644 --- a/dbus/proxy.go +++ b/dbus/proxy.go @@ -9,7 +9,6 @@ import ( "sync" "git.gensokyo.uk/security/fortify/helper" - "git.gensokyo.uk/security/fortify/helper/bwrap" ) // ProxyName is the file name or path to the proxy program. @@ -20,16 +19,18 @@ var ProxyName = "xdg-dbus-proxy" // Once sealed, configuration changes will no longer be possible and attempting to do so will result in a panic. type Proxy struct { helper helper.Helper - bwrap *bwrap.Config ctx context.Context cancel context.CancelCauseFunc name string session [2]string system [2]string - CmdF func(cmd *exec.Cmd) + CmdF func(any) sysP bool + CommandContext func(ctx context.Context) (cmd *exec.Cmd) + FilterF func([]byte) []byte + seal io.WriterTo lock sync.RWMutex } -- cgit v1.3.1