commit 972783f

shtrophic  ·  2024-11-19 19:47:15 +0000 UTC
parent 017140f 
only rwc /dev/shm when WITHOUT_SHM is undefined
1 files changed,  +2, -0
M sandbox.c
M sandbox.c
+2, -0 
 1@@ -149,7 +149,9 @@ void sbox_enter(const char *basedir)
 2 
 3     LANDLOCK_PATH(basedir,                LL_RWCD);
 4     LANDLOCK_PATH("/tmp",                 LL_RWCD);
 5+#ifndef WITHOUT_SHM
 6     LANDLOCK_PATH("/dev/shm",             LL_RWCF);
 7+#endif
 8     LANDLOCK_PATH("/etc/resolv.conf",     LL_R  );
 9     LANDLOCK_PATH("/etc/hosts",           LL_R  );
10     LANDLOCK_PATH("/etc/ssl/openssl.cnf", LL_R  );