proc/priv/shim: seccomp bpf filter via libseccomp

Rulesets adapted from Flatpak for compatibility. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-01-20 23:39:47 +09:00
parent 27f5922d5c
commit 3df344828f
5 changed files with 361 additions and 0 deletions
--- a/flake.nix
+++ b/flake.nix
@@ -132,6 +132,7 @@
                [
                  musl
                  libffi
+                  libseccomp
                  acl
                  wayland
                  wayland-protocols
@@ -172,6 +173,7 @@
                [
                  musl
                  libffi
+                  libseccomp
                  acl
                  wayland
                  wayland-protocols