784ca98041
Include directory read access in Landlock read-write directory rules. Without it, paths such as /dev/dri could be writable but not enumerable after sandboxing, which made Mesa fail while probing GPU devices. Allow the Compositor to open /dev/udmabuf as well when the device is present, matching the other GPU device nodes exposed to the process. |
||
|---|---|---|
| .. | ||
| CMakeLists.txt | ||
| Sandbox.cpp | ||
| Sandbox.h | ||
| Seccomp.cpp | ||
| Seccomp.h | ||