proc/priv/shim: seccomp bpf filter via libseccomp

Rulesets adapted from Flatpak for compatibility. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-01-20 23:39:47 +09:00
parent 27f5922d5c
commit 3df344828f
5 changed files with 361 additions and 0 deletions
--- a/package.nix
+++ b/package.nix
@@ -6,6 +6,7 @@
  bubblewrap,
  pkg-config,
  libffi,
+  libseccomp,
  acl,
  wayland,
  wayland-protocols,
@@ -45,6 +46,7 @@ buildGoModule rec {
  buildInputs =
    [
      libffi
+      libseccomp
      acl
      wayland
      wayland-protocols