From b3ef53b193bdf764d8f04e19ea47901b71eec10b Mon Sep 17 00:00:00 2001 From: Ophestra Umiker Date: Fri, 6 Dec 2024 04:25:33 +0900 Subject: app: integrate security-context-v1 Should be able to get rid of XDG_RUNTIME_DIR share after this. Signed-off-by: Ophestra Umiker --- internal/app/app_nixos_test.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'internal/app/app_nixos_test.go') diff --git a/internal/app/app_nixos_test.go b/internal/app/app_nixos_test.go index 06bde05c..33380793 100644 --- a/internal/app/app_nixos_test.go +++ b/internal/app/app_nixos_test.go @@ -10,7 +10,7 @@ import ( var testCasesNixos = []sealTestCase{ { - "nixos chromium", new(stubNixOS), + "nixos chromium direct wayland", new(stubNixOS), &app.Config{ ID: "org.chromium.Chromium", Command: []string{"/nix/store/yqivzpzzn7z5x0lq9hmbzygh45d8rhqd-chromium-start"}, @@ -18,7 +18,7 @@ var testCasesNixos = []sealTestCase{ AppID: 1, Groups: []string{}, Username: "u0_a1", Outer: "/var/lib/persist/module/fortify/0/1", Sandbox: &app.SandboxConfig{ - UserNS: true, Net: true, MapRealUID: true, Env: nil, + UserNS: true, Net: true, MapRealUID: true, DirectWayland: true, Env: nil, Filesystem: []*app.FilesystemConfig{ {Src: "/bin", Must: true}, {Src: "/usr/bin", Must: true}, {Src: "/nix/store", Must: true}, {Src: "/run/current-system", Must: true}, -- cgit v1.3.1