diff options
| author | Daniel Mack <zonque@gmail.com> | 2014-08-22 18:55:21 +0200 |
|---|---|---|
| committer | Daniel Mack <daniel@zonque.org> | 2014-09-08 14:12:56 +0200 |
| commit | a610cc4f18c24a007e5a2cac21b2ecbd81e5f3c3 (patch) | |
| tree | 7e1dd169235a078a63a367fadbf2f54aa31ac6ca /src/core/namespace.h | |
| parent | 501996231293506a85bf4d610938a655ddc8cb92 (diff) | |
namespace: add support for custom kdbus endpoint
If a path to a previously created custom kdbus endpoint is passed in,
bind-mount a new devtmpfs that contains a 'bus' node, which in turn in
bind-mounted with the custom endpoint. This tmpfs then mounted over the
kdbus subtree that refers to the current bus.
This way, we can fake the bus node in order to lock down services with
a kdbus custom endpoint policy.
Diffstat (limited to 'src/core/namespace.h')
| -rw-r--r-- | src/core/namespace.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/core/namespace.h b/src/core/namespace.h index 9343fe3264..9cd420e958 100644 --- a/src/core/namespace.h +++ b/src/core/namespace.h @@ -46,6 +46,7 @@ int setup_namespace(char **read_write_dirs, char **inaccessible_dirs, char *tmp_dir, char *var_tmp_dir, + char *endpoint_path, bool private_dev, ProtectHome protect_home, ProtectSystem protect_system, |