maemachinebroke/hakurei
1
0
Fork 0
forked from security/hakurei
Code Pull Requests Activity

app: rename /fortify to /.fortify

Browse Source 
Also removed the inner share tmpfs mount.

Signed-off-by: Ophestra <cat@gensokyo.uk>
This commit is contained in:
Ophestra
2024-12-21 18:11:32 +09:00
parent 8bf12bbe68
commit 7a8b625a57
5 changed files with 249 additions and 253 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
internal/app/share.system.go
View File

@@ -33,9 +33,6 @@ func (seal *appSeal) shareSystem() {
seal.sys.Ensure(targetTmpdir, 01700)
seal.sys.UpdatePermType(system.User, targetTmpdir, acl.Read, acl.Write, acl.Execute)
seal.sys.bwrap.Bind(targetTmpdir, "/tmp", false, true)
// mount tmpfs on inner shared directory (e.g. `/tmp/fortify.%d`)
seal.sys.bwrap.Tmpfs(seal.SharePath, 1*1024*1024)
}
func (seal *appSeal) sharePasswd(os linux.System) {