|
Line
Link Here
|
| 0 |
-- a/security/sandbox/linux/Sandbox.cpp 2023-07-10 20:29:48.000000000 +0100 |
0 |
++ b/security/sandbox/linux/Sandbox.cpp 2023-07-15 09:13:43.561724668 +0100 |
|
Lines 18-23
Link Here
|
| 18 |
#include <dirent.h> |
18 |
#include <dirent.h> |
| 19 |
#ifdef NIGHTLY_BUILD |
19 |
#ifdef NIGHTLY_BUILD |
| 20 |
# include "dlfcn.h" |
20 |
# include "dlfcn.h" |
|
|
21 |
#else |
| 22 |
# include <dlfcn.h> |
| 21 |
#endif |
23 |
#endif |
| 22 |
#include <errno.h> |
24 |
#include <errno.h> |
| 23 |
#include <fcntl.h> |
25 |
#include <fcntl.h> |
|
Lines 685-691
Link Here
|
| 685 |
files->Add("/proc/stat", SandboxOpenedFile::Error{}); |
687 |
files->Add("/proc/stat", SandboxOpenedFile::Error{}); |
| 686 |
files->Add("/proc/net/unix", SandboxOpenedFile::Error{}); |
688 |
files->Add("/proc/net/unix", SandboxOpenedFile::Error{}); |
| 687 |
files->Add("/proc/self/maps", SandboxOpenedFile::Error{}); |
689 |
files->Add("/proc/self/maps", SandboxOpenedFile::Error{}); |
| 688 |
|
690 |
Unused << dlopen("libgcc_s.so.1", RTLD_GLOBAL|RTLD_LAZY); |
| 689 |
// Finally, start the sandbox. |
691 |
// Finally, start the sandbox. |
| 690 |
SetCurrentProcessSandbox(GetMediaSandboxPolicy(files)); |
692 |
SetCurrentProcessSandbox(GetMediaSandboxPolicy(files)); |
| 691 |
} |
693 |
} |
