summaryrefslogtreecommitdiff
path: root/sandbox.c
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--sandbox.c44
1 files changed, 22 insertions, 22 deletions
diff --git a/sandbox.c b/sandbox.c
index 3a5ca48..6eafc43 100644
--- a/sandbox.c
+++ b/sandbox.c
@@ -13,30 +13,30 @@ static
13LL_BEGIN(sbox_enter_linux_, const char* basedir, const char *address, int smail) { 13LL_BEGIN(sbox_enter_linux_, const char* basedir, const char *address, int smail) {
14 14
15 const unsigned long long 15 const unsigned long long
16 r = LANDLOCK_ACCESS_FS_READ_DIR | 16 rd = LANDLOCK_ACCESS_FS_READ_DIR,
17 LANDLOCK_ACCESS_FS_READ_FILE, 17 rf = LANDLOCK_ACCESS_FS_READ_FILE,
18 w = LANDLOCK_ACCESS_FS_WRITE_FILE | 18 w = LANDLOCK_ACCESS_FS_WRITE_FILE |
19 LANDLOCK_ACCESS_FS_TRUNCATE, 19 LANDLOCK_ACCESS_FS_TRUNCATE,
20 c = LANDLOCK_ACCESS_FS_MAKE_DIR | 20 c = LANDLOCK_ACCESS_FS_MAKE_DIR |
21 LANDLOCK_ACCESS_FS_MAKE_REG | 21 LANDLOCK_ACCESS_FS_MAKE_REG |
22 LANDLOCK_ACCESS_FS_TRUNCATE | 22 LANDLOCK_ACCESS_FS_TRUNCATE |
23 LANDLOCK_ACCESS_FS_MAKE_SYM | 23 LANDLOCK_ACCESS_FS_MAKE_SYM |
24 LANDLOCK_ACCESS_FS_REMOVE_DIR | 24 LANDLOCK_ACCESS_FS_REMOVE_DIR |
25 LANDLOCK_ACCESS_FS_REMOVE_FILE | 25 LANDLOCK_ACCESS_FS_REMOVE_FILE |
26 LANDLOCK_ACCESS_FS_REFER, 26 LANDLOCK_ACCESS_FS_REFER,
27 s = LANDLOCK_ACCESS_FS_MAKE_SOCK, 27 s = LANDLOCK_ACCESS_FS_MAKE_SOCK,
28 x = LANDLOCK_ACCESS_FS_EXECUTE; 28 x = LANDLOCK_ACCESS_FS_EXECUTE;
29 29
30 LL_PATH(basedir, r|w|c); 30 LL_PATH(basedir, rf|rd|w|c);
31 LL_PATH("/tmp", r|w|c); 31 LL_PATH("/tmp", rf|rd|w|c);
32#ifndef WITHOUT_SHM 32#ifndef WITHOUT_SHM
33 LL_PATH("/dev/shm", r|w|c); 33 LL_PATH("/dev/shm", rf|w|c );
34#endif 34#endif
35 LL_PATH("/etc/resolv.conf", r ); 35 LL_PATH("/etc/resolv.conf", rf );
36 LL_PATH("/etc/hosts", r ); 36 LL_PATH("/etc/hosts", rf );
37 LL_PATH("/etc/ssl/openssl.cnf", r ); 37 LL_PATH("/etc/ssl/openssl.cnf", rf );
38 LL_PATH("/etc/ssl/cert.pem", r ); 38 LL_PATH("/etc/ssl/cert.pem", rf );
39 LL_PATH("/usr/share/zoneinfo", r ); 39 LL_PATH("/usr/share/zoneinfo", rf );
40 40
41 if (*address == '/') 41 if (*address == '/')
42 LL_PATH(address, s); 42 LL_PATH(address, s);