From aa1f96eeebecaa8e4cbbccb826fe168c9270228d Mon Sep 17 00:00:00 2001
From: Ophestra Umiker <cat@ophivana.moe>
Date: Mon, 28 Oct 2024 18:52:23 +0900
Subject: fsu: check parent executable path

Only allow main program to launch fsu. This change and further checks in the main program reduces attack surface.

Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
---
 package.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'package.nix')

diff --git a/package.nix b/package.nix
index 4293f47b..b2c72f63 100644
--- a/package.nix
+++ b/package.nix
@@ -21,7 +21,7 @@ buildGoModule rec {
     "-X"
     "main.Version=v${version}"
     "-X"
-    "main.FortifyPath=${placeholder "out"}/bin/fortify"
+    "main.FortifyPath=${placeholder "out"}/bin/.fortify-wrapped"
   ];
 
   buildInputs = [
-- 
cgit v1.3.1