From ef81828e0c1ce6277e0b124f6062eab564dfeceb Mon Sep 17 00:00:00 2001 From: Ophestra Date: Wed, 19 Feb 2025 13:41:06 +0900 Subject: app: remove share method This is yet another implementation detail from before system.I, getting rid of this vastly cuts down on redundant seal state. Signed-off-by: Ophestra --- fst/config.go | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) (limited to 'fst/config.go') diff --git a/fst/config.go b/fst/config.go index 89107798..d96934d4 100644 --- a/fst/config.go +++ b/fst/config.go @@ -10,9 +10,11 @@ const Tmp = "/.fortify" // Config is used to seal an app type Config struct { - // application ID + // reverse-DNS style arbitrary identifier string from config; + // passed to wayland security-context-v1 as application ID + // and used as part of defaults in dbus session proxy ID string `json:"id"` - // value passed through to the child process as its argv + // final argv, passed to init Command []string `json:"command"` Confinement ConfinementConfig `json:"confinement"` @@ -32,7 +34,7 @@ type ConfinementConfig struct { Outer string `json:"home"` // bwrap sandbox confinement configuration Sandbox *SandboxConfig `json:"sandbox"` - // extra acl entries to append + // extra acl ops, runs after everything else ExtraPerms []*ExtraPermConfig `json:"extra_perms,omitempty"` // reference to a system D-Bus proxy configuration, -- cgit v1.3.1