| % minijail-config-file v0 |
| |
| # Copyright 2024 The ChromiumOS Authors |
| # Use of this source code is governed by a BSD-style license that can be |
| # found in the LICENSE file. |
| |
| # Namespaces: |
| # Enter new network namespace. |
| e |
| # Enter new IPC namespace. |
| l |
| # Enter new cgroup namespace. |
| N |
| # Enter new pid namespace. |
| p |
| # Enter new UTS/hostname namespace. |
| uts |
| # Set up a minimalistic mount namespace. |
| profile=minimalistic-mountns |
| |
| # Set no_new_privs. |
| n |
| |
| # Enable seccomp policy. |
| S = /usr/share/policy/mini_udisks-seccomp.policy |
| # Set user and group. |
| u = mini_udisks |
| g = mini_udisks |
| |
| # Mounts: |
| # Mount tmpfs at /run. |
| mount = /run,/run,tmpfs,MS_NODEV|MS_NOEXEC|MS_NOSUID,mode=755,size=10M |
| # Allow D-Bus. |
| bind-mount = /run/dbus |
