From 610da575ea4fe4a0918e0a5cdcfed3ab76179e01 Mon Sep 17 00:00:00 2001 From: "Albert S." Date: Tue, 4 Nov 2025 21:29:17 +0100 Subject: [PATCH] sandbox: sandbox-linux: Adapt to newest exile.h --- sandbox/sandbox-linux.cpp | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/sandbox/sandbox-linux.cpp b/sandbox/sandbox-linux.cpp index e212521..e703689 100644 --- a/sandbox/sandbox-linux.cpp +++ b/sandbox/sandbox-linux.cpp @@ -44,7 +44,7 @@ bool SandboxLinux::enable(std::vector fsPaths) struct exile_policy *policy = exile_init_policy(); if(policy == NULL) { - Logger::error() << "Failed to init sandboxing policy (worker) "; + Logger::error() << "Failed to init sandboxing policy"; return false; } for(unsigned int i = 0; i < fsPaths.size(); i++) @@ -55,10 +55,8 @@ bool SandboxLinux::enable(std::vector fsPaths) exile_append_path_policies(policy, EXILE_FS_ALLOW_ALL_READ | EXILE_FS_ALLOW_ALL_WRITE, path.c_str()); } } - policy->drop_caps = 1; policy->not_dumpable = 1; policy->no_new_privs = 1; - policy->mount_path_policies_to_chroot = 1; policy->vow_promises = exile_vows_from_str("stdio wpath cpath rpath inet unix thread"); if(exile_enable_policy(policy) != 0) {