dbus: enable syscall filter

Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-01-22 02:01:01 +09:00 · 2025-01-22 02:01:01 +09:00 · 5e90b08406
commit 5e90b08406
parent 5a64cdaf4f
1 changed files with 1 additions and 0 deletions
--- a/dbus/run.go
+++ b/dbus/run.go
@ -67,6 +67,7 @@ func (p *Proxy) Start(ready chan error, output io.Writer, sandbox bool) error {
 			Unshare:       nil,
 			Hostname:      "fortify-dbus",
 			Chdir:         "/",
+			Syscall:       &bwrap.SyscallPolicy{DenyDevel: true, Multiarch: true},
 			Clearenv:      true,
 			NewSession:    true,
 			DieWithParent: true,