Linux desktop application sandbox.
Ophestra Umiker
1cd0846dc9
There is no way to have machinectl pass part of its argv to the child, and formatting the string for a shell is highly error-prone and complex, so the argv slice is encoded and passed to a launcher process launched by machinectl which then calls execve(2) to start the final process. Signed-off-by: Ophestra Umiker <cat@ophivana.moe> |
||
|---|---|---|
| .gitignore | ||
| acl.go | ||
| cli.go | ||
| flake.lock | ||
| flake.nix | ||
| go.mod | ||
| launcher.go | ||
| main.go | ||
| util.go | ||
| x11.go | ||