From 82a072f641b2b8eb4f966a01056283f93b57342f Mon Sep 17 00:00:00 2001 From: Ophestra Date: Mon, 17 Feb 2025 00:07:52 +0900 Subject: system/tmpfiles: implement private tmpfiles These are only available within the mount namespace and should significantly reduce attack surface. Signed-off-by: Ophestra --- internal/system/op_test.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'internal/system/op_test.go') diff --git a/internal/system/op_test.go b/internal/system/op_test.go index 28929e6c..3e8c4d2d 100644 --- a/internal/system/op_test.go +++ b/internal/system/op_test.go @@ -100,7 +100,7 @@ func TestI_Equal(t *testing.T) { "op type mismatch", system.New(150). ChangeHosts("chronos"). - CopyFile("/tmp/fortify.1971/30c9543e0a2c9621a8bfecb9d874c347/pulse-cookie", "/home/ophestra/xdg/config/pulse/cookie"), + CopyFile(new([]byte), "/home/ophestra/xdg/config/pulse/cookie", 0, 256), system.New(150). ChangeHosts("chronos"). Ensure("/run", 0755), -- cgit v1.3.1