From 27f5922d5c4d4432246d6de6eb0d81d574cdc8c7 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Mon, 20 Jan 2025 21:12:39 +0900 Subject: fst: include syscall filter configuration This value is passed through to shim. Signed-off-by: Ophestra --- internal/proc/priv/shim/payload.go | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) (limited to 'internal/proc') diff --git a/internal/proc/priv/shim/payload.go b/internal/proc/priv/shim/payload.go index e9425031..2d6854f9 100644 --- a/internal/proc/priv/shim/payload.go +++ b/internal/proc/priv/shim/payload.go @@ -1,6 +1,9 @@ package shim -import "git.gensokyo.uk/security/fortify/helper/bwrap" +import ( + "git.gensokyo.uk/security/fortify/fst" + "git.gensokyo.uk/security/fortify/helper/bwrap" +) const Env = "FORTIFY_SHIM" @@ -15,6 +18,8 @@ type Payload struct { Home string // sync fd Sync *uintptr + // seccomp opts pass through + Syscall *fst.SyscallConfig // verbosity pass through Verbose bool -- cgit v1.3.1