crtxcr/cgitsb
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

sandbox: use a static path for the chroot dir

Browse Source 
As a cgi process it creates way too many directories
if we keep the default behaviour of qssb. Another
problem at the moment is the fact that qssb does
not provide a mechanism to cleanup yet.
This commit is contained in:
Albert S. 2019-11-22 19:06:36 +01:00
parent 6fdf5f8f5a
commit 3b860491e0
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
cgit.c
View File

@ -1065,6 +1065,7 @@ void enable_sandbox()
} }
policy->path_policies = &dev_policy; policy->path_policies = &dev_policy;
policy->namespace_options |= QSSB_UNSHARE_NETWORK; policy->namespace_options |= QSSB_UNSHARE_NETWORK;
policy->chroot_target_path = "/tmp/.sandbox_cgit";
if(qssb_enable_policy(policy) != 0) if(qssb_enable_policy(policy) != 0)
{ {
fprintf(stderr, "%s", "Failed to init sandbox\n"); fprintf(stderr, "%s", "Failed to init sandbox\n");