From 2dd49c437c19fcd55ce22e732b544d22b91a6342 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Wed, 26 Mar 2025 02:49:37 +0900 Subject: app: create XDG_RUNTIME_DIR with perm 0700 Many programs complain about this. Signed-off-by: Ophestra --- internal/app/seal.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'internal/app/seal.go') diff --git a/internal/app/seal.go b/internal/app/seal.go index c9ec4bc6..80e95370 100644 --- a/internal/app/seal.go +++ b/internal/app/seal.go @@ -291,7 +291,7 @@ func (seal *outcome) finalise(ctx context.Context, sys sys.State, config *fst.Co // inner XDG_RUNTIME_DIR default formatting of `/run/user/%d` as post-fsu user innerRuntimeDir := path.Join("/run/user", mapuid.String()) seal.container.Tmpfs("/run/user", 1<<12, 0755) - seal.container.Tmpfs(innerRuntimeDir, 1<<23, 0755) + seal.container.Tmpfs(innerRuntimeDir, 1<<23, 0700) seal.env[xdgRuntimeDir] = innerRuntimeDir seal.env[xdgSessionClass] = "user" seal.env[xdgSessionType] = "tty" -- cgit v1.3.1