namespace: add support for custom kdbus endpoint
If a path to a previously created custom kdbus endpoint is passed in, bind-mount a new devtmpfs that contains a 'bus' node, which in turn in bind-mounted with the custom endpoint. This tmpfs then mounted over the kdbus subtree that refers to the current bus. This way, we can fake the bus node in order to lock down services with a kdbus custom endpoint policy.
This commit is contained in:
@@ -1523,6 +1523,7 @@ static int exec_child(ExecCommand *command,
|
||||
context->inaccessible_dirs,
|
||||
tmp,
|
||||
var,
|
||||
NULL,
|
||||
context->private_devices,
|
||||
context->protect_home,
|
||||
context->protect_system,
|
||||
|
||||
Reference in New Issue
Block a user