diff options
Diffstat (limited to 'sandbox.c')
| -rw-r--r-- | sandbox.c | 44 |
1 files changed, 22 insertions, 22 deletions
| @@ -13,30 +13,30 @@ static | |||
| 13 | LL_BEGIN(sbox_enter_linux_, const char* basedir, const char *address, int smail) { | 13 | LL_BEGIN(sbox_enter_linux_, const char* basedir, const char *address, int smail) { |
| 14 | 14 | ||
| 15 | const unsigned long long | 15 | const unsigned long long |
| 16 | r = LANDLOCK_ACCESS_FS_READ_DIR | | 16 | rd = LANDLOCK_ACCESS_FS_READ_DIR, |
| 17 | LANDLOCK_ACCESS_FS_READ_FILE, | 17 | rf = LANDLOCK_ACCESS_FS_READ_FILE, |
| 18 | w = LANDLOCK_ACCESS_FS_WRITE_FILE | | 18 | w = LANDLOCK_ACCESS_FS_WRITE_FILE | |
| 19 | LANDLOCK_ACCESS_FS_TRUNCATE, | 19 | LANDLOCK_ACCESS_FS_TRUNCATE, |
| 20 | c = LANDLOCK_ACCESS_FS_MAKE_DIR | | 20 | c = LANDLOCK_ACCESS_FS_MAKE_DIR | |
| 21 | LANDLOCK_ACCESS_FS_MAKE_REG | | 21 | LANDLOCK_ACCESS_FS_MAKE_REG | |
| 22 | LANDLOCK_ACCESS_FS_TRUNCATE | | 22 | LANDLOCK_ACCESS_FS_TRUNCATE | |
| 23 | LANDLOCK_ACCESS_FS_MAKE_SYM | | 23 | LANDLOCK_ACCESS_FS_MAKE_SYM | |
| 24 | LANDLOCK_ACCESS_FS_REMOVE_DIR | | 24 | LANDLOCK_ACCESS_FS_REMOVE_DIR | |
| 25 | LANDLOCK_ACCESS_FS_REMOVE_FILE | | 25 | LANDLOCK_ACCESS_FS_REMOVE_FILE | |
| 26 | LANDLOCK_ACCESS_FS_REFER, | 26 | LANDLOCK_ACCESS_FS_REFER, |
| 27 | s = LANDLOCK_ACCESS_FS_MAKE_SOCK, | 27 | s = LANDLOCK_ACCESS_FS_MAKE_SOCK, |
| 28 | x = LANDLOCK_ACCESS_FS_EXECUTE; | 28 | x = LANDLOCK_ACCESS_FS_EXECUTE; |
| 29 | 29 | ||
| 30 | LL_PATH(basedir, r|w|c); | 30 | LL_PATH(basedir, rf|rd|w|c); |
| 31 | LL_PATH("/tmp", r|w|c); | 31 | LL_PATH("/tmp", rf|rd|w|c); |
| 32 | #ifndef WITHOUT_SHM | 32 | #ifndef WITHOUT_SHM |
| 33 | LL_PATH("/dev/shm", r|w|c); | 33 | LL_PATH("/dev/shm", rf|w|c ); |
| 34 | #endif | 34 | #endif |
| 35 | LL_PATH("/etc/resolv.conf", r ); | 35 | LL_PATH("/etc/resolv.conf", rf ); |
| 36 | LL_PATH("/etc/hosts", r ); | 36 | LL_PATH("/etc/hosts", rf ); |
| 37 | LL_PATH("/etc/ssl/openssl.cnf", r ); | 37 | LL_PATH("/etc/ssl/openssl.cnf", rf ); |
| 38 | LL_PATH("/etc/ssl/cert.pem", r ); | 38 | LL_PATH("/etc/ssl/cert.pem", rf ); |
| 39 | LL_PATH("/usr/share/zoneinfo", r ); | 39 | LL_PATH("/usr/share/zoneinfo", rf ); |
| 40 | 40 | ||
| 41 | if (*address == '/') | 41 | if (*address == '/') |
| 42 | LL_PATH(address, s); | 42 | LL_PATH(address, s); |