From 6220f7e197f01846f5e4e3090acf9251f3ae6ade Mon Sep 17 00:00:00 2001 From: Ophestra Umiker Date: Fri, 11 Oct 2024 02:01:03 +0900 Subject: app: migrate to new shim implementation Both machinectl and sudo launch methods launch shim as shim is now responsible for setting up the sandbox. Various app structures are adapted to accommodate bwrap configuration and mediated wayland access. Signed-off-by: Ophestra Umiker --- internal/app/config.go | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'internal/app/config.go') diff --git a/internal/app/config.go b/internal/app/config.go index d9648740..17203a46 100644 --- a/internal/app/config.go +++ b/internal/app/config.go @@ -2,6 +2,7 @@ package app import ( "git.ophivana.moe/cat/fortify/dbus" + "git.ophivana.moe/cat/fortify/helper/bwrap" "git.ophivana.moe/cat/fortify/internal/state" ) @@ -22,6 +23,11 @@ type Config struct { // ConfinementConfig defines fortified child's confinement type ConfinementConfig struct { + // bwrap sandbox confinement configuration + Sandbox *bwrap.Config `json:"sandbox"` + // mediated access to wayland socket + Wayland bool `json:"wayland"` + // reference to a system D-Bus proxy configuration, // nil value disables system bus proxy SystemBus *dbus.Config `json:"system_bus,omitempty"` -- cgit v1.3.1