From 1302bcede057538665a4eb626357409d8cb515e8 Mon Sep 17 00:00:00 2001 From: Ophestra Umiker Date: Mon, 14 Oct 2024 02:27:02 +0900 Subject: init: custom init process inside sandbox Bubblewrap as init is a bit awkward and don't support a few setup actions fortify will need, such as starting/supervising nscd. Signed-off-by: Ophestra Umiker --- internal/shim/payload.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'internal/shim/payload.go') diff --git a/internal/shim/payload.go b/internal/shim/payload.go index 7248c86c..45a608d0 100644 --- a/internal/shim/payload.go +++ b/internal/shim/payload.go @@ -7,8 +7,8 @@ const EnvShim = "FORTIFY_SHIM" type Payload struct { // child full argv Argv []string - // bwrap, target full exec path - Exec [2]string + // fortify, bwrap, target full exec path + Exec [3]string // bwrap config Bwrap *bwrap.Config // whether to pass wayland fd -- cgit v1.3.1