From ea8d1c07df18ceb94932fcc94ad00eb57c99da33 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Sat, 15 Feb 2025 02:56:08 +0900 Subject: priv/shim: move /sbin/init setup to app Signed-off-by: Ophestra --- internal/priv/shim/main.go | 11 +---------- 1 file changed, 1 insertion(+), 10 deletions(-) (limited to 'internal/priv') diff --git a/internal/priv/shim/main.go b/internal/priv/shim/main.go index 4397cc37..7baf5330 100644 --- a/internal/priv/shim/main.go +++ b/internal/priv/shim/main.go @@ -121,21 +121,12 @@ func Main() { }() } - // bind fortify inside sandbox - var ( - innerSbin = path.Join(fst.Tmp, "sbin") - innerFortify = path.Join(innerSbin, "fortify") - innerInit = path.Join(innerSbin, "init") - ) - conf.Bind(proc.MustExecutable(), innerFortify) - conf.Symlink("fortify", innerInit) - helper.BubblewrapName = payload.Exec[0] // resolved bwrap path by parent if fmsg.Verbose() { seccomp.CPrintln = fmsg.Println } if b, err := helper.NewBwrap( - conf, innerInit, + conf, path.Join(fst.Tmp, "sbin/init"), nil, func(int, int) []string { return make([]string, 0) }, extraFiles, syncFd, -- cgit v1.3.1