We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
2 parents aaf2379 + 503d7b6 commit 631e448Copy full SHA for 631e448
1 file changed
cmd/wireproxy/main.go
@@ -80,6 +80,7 @@ func lock(stage string) {
80
// Linux
81
panicIfError(landlock.V1.BestEffort().RestrictPaths(
82
landlock.RODirs("/"),
83
+ landlock.RWFiles("/dev/null").IgnoreIfMissing(),
84
))
85
case "boot-daemon":
86
case "read-config":
0 commit comments