From 805ef99f9bf75189c512401ee5b92942be66342b Mon Sep 17 00:00:00 2001 From: Ophestra Umiker Date: Sat, 12 Oct 2024 22:33:04 +0900 Subject: app: filesystem struct that maps to all bwrap bind options Signed-off-by: Ophestra Umiker --- internal/app/seal.go | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) (limited to 'internal/app/seal.go') diff --git a/internal/app/seal.go b/internal/app/seal.go index 0d5ee7ac..ad16663f 100644 --- a/internal/app/seal.go +++ b/internal/app/seal.go @@ -127,7 +127,7 @@ func (a *app) Seal(config *Config) error { if d, err := os.ReadDir("/"); err != nil { return err } else { - b := make([][2]string, 0, len(d)) + b := make([]*FilesystemConfig, 0, len(d)) for _, ent := range d { name := ent.Name() switch name { @@ -136,16 +136,16 @@ func (a *app) Seal(config *Config) error { case "run": default: p := "/" + name - b = append(b, [2]string{p, p}) + b = append(b, &FilesystemConfig{Src: p, Write: true, Must: true}) } } - conf.Bind = append(conf.Bind, b...) + conf.Filesystem = append(conf.Filesystem, b...) } // bind entries in /run if d, err := os.ReadDir("/run"); err != nil { return err } else { - b := make([][2]string, 0, len(d)) + b := make([]*FilesystemConfig, 0, len(d)) for _, ent := range d { name := ent.Name() switch name { @@ -153,10 +153,10 @@ func (a *app) Seal(config *Config) error { case "dbus": default: p := "/run/" + name - b = append(b, [2]string{p, p}) + b = append(b, &FilesystemConfig{Src: p, Write: true, Must: true}) } } - conf.Bind = append(conf.Bind, b...) + conf.Filesystem = append(conf.Filesystem, b...) } config.Confinement.Sandbox = conf } -- cgit v1.3.1