From 1302bcede057538665a4eb626357409d8cb515e8 Mon Sep 17 00:00:00 2001 From: Ophestra Umiker Date: Mon, 14 Oct 2024 02:27:02 +0900 Subject: init: custom init process inside sandbox Bubblewrap as init is a bit awkward and don't support a few setup actions fortify will need, such as starting/supervising nscd. Signed-off-by: Ophestra Umiker --- internal/app/config.go | 1 + 1 file changed, 1 insertion(+) (limited to 'internal/app/config.go') diff --git a/internal/app/config.go b/internal/app/config.go index 4c21d8be..7950c59d 100644 --- a/internal/app/config.go +++ b/internal/app/config.go @@ -90,6 +90,7 @@ func (s *SandboxConfig) Bwrap() *bwrap.Config { Mqueue: []string{"/dev/mqueue"}, NewSession: !s.NoNewSession, DieWithParent: true, + AsInit: true, } for _, c := range s.Filesystem { -- cgit v1.3.1