3fa446f68e
Previously passing a file path (rather than a directory) to `add_landlock_path_if_exists` would grant access to the containing directory - this was a bit of a footgun. We now only grant access to exactly the path requested, which is in line with how the MacOS implementation works as well. |
||
|---|---|---|
| .. | ||
| CMakeLists.txt | ||
| Sandbox.cpp | ||
| Sandbox.h | ||
| Seccomp.cpp | ||
| Seccomp.h | ||