From a610cc4f18c24a007e5a2cac21b2ecbd81e5f3c3 Mon Sep 17 00:00:00 2001 From: Daniel Mack Date: Fri, 22 Aug 2014 18:55:21 +0200 Subject: namespace: add support for custom kdbus endpoint If a path to a previously created custom kdbus endpoint is passed in, bind-mount a new devtmpfs that contains a 'bus' node, which in turn in bind-mounted with the custom endpoint. This tmpfs then mounted over the kdbus subtree that refers to the current bus. This way, we can fake the bus node in order to lock down services with a kdbus custom endpoint policy. --- src/core/namespace.h | 1 + 1 file changed, 1 insertion(+) (limited to 'src/core/namespace.h') diff --git a/src/core/namespace.h b/src/core/namespace.h index 9343fe3264..9cd420e958 100644 --- a/src/core/namespace.h +++ b/src/core/namespace.h @@ -46,6 +46,7 @@ int setup_namespace(char **read_write_dirs, char **inaccessible_dirs, char *tmp_dir, char *var_tmp_dir, + char *endpoint_path, bool private_dev, ProtectHome protect_home, ProtectSystem protect_system, -- cgit v1.2.3