From 7ef9d7f02041681e4f4ae241bb65416894ddfc8e Mon Sep 17 00:00:00 2001 From: Albert S Date: Sun, 23 Oct 2022 21:36:54 +0200 Subject: [PATCH] sandbox: Use exile_vows_from_str() for seccomp policy --- sandbox/sandbox-linux.cpp | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/sandbox/sandbox-linux.cpp b/sandbox/sandbox-linux.cpp index f7435d3..6038900 100644 --- a/sandbox/sandbox-linux.cpp +++ b/sandbox/sandbox-linux.cpp @@ -55,10 +55,7 @@ bool SandboxLinux::enable(std::vector fsPaths) policy->not_dumpable = 1; policy->no_new_privs = 1; policy->mount_path_policies_to_chroot = 1; - policy->vow_promises = EXILE_SYSCALL_VOW_STDIO | EXILE_SYSCALL_VOW_WPATH | EXILE_SYSCALL_VOW_CPATH | - EXILE_SYSCALL_VOW_RPATH | EXILE_SYSCALL_VOW_INET | EXILE_SYSCALL_VOW_UNIX | - EXILE_SYSCALL_VOW_THREAD; - + policy->vow_promises = exile_vows_from_str("stdio wpath cpath rpath inet unix thread"); if(exile_enable_policy(policy) != 0) { Logger::error() << "Sandbox: Activation of exile failed!";