security-and-privacy/mat2
security-and-privacy/mat2
1
0
Fork 0
mirror of synced 2024-11-22 09:14:23 +01:00
Code Releases Activity

sandbox: stop mounting new filesystem on /tmp

Browse Source 
Mounting new, empty filesystem on /tmp makes impossible to use mat2 for manipulating files stored there. Especially it breaks running tests while creating package and using /tmp as temporary builddir which is common setup in Arch Linux:
https://aur.archlinux.org/packages/mat2/#comment-721221
This commit is contained in:
Ivy Fay 2019-12-18 02:23:43 -08:00
parent 7465cedee7
commit b2efffdaa4
1 changed files with 0 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
libmat2/bubblewrap.py
View File

@ -53,7 +53,6 @@ def _get_bwrap_args(tempdir: str,
['--dev', '/dev', ['--dev', '/dev',
'--proc', '/proc', '--proc', '/proc',
'--chdir', cwd, '--chdir', cwd,
'--tmpfs', '/tmp',
'--unshare-user-try', '--unshare-user-try',
'--unshare-ipc', '--unshare-ipc',
'--unshare-pid', '--unshare-pid',